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FEATURE PACKAGE 

Security: Is Your 

Enterprise Protected? .™ 

Is your enterprise as ^^S^B&V^ 
secure as it should be ^^^SwM^ 
against today's biggest 
threats? We offer tips for 
making sure you're ready. 

Inside Today's Biggest Security Threats 24 

Essential Elements To Keep Your Enterprise Secure 25 

Protect Your Enterprise From Workers Gone Bad 26 

Building Information Security Policies & Training 27 

PHYSICAL 

INFRASTRUCTURE 

■ Enterprises pay a lot of attention to the location 
of their data centers. That's because a facility's 
location can have a huge impact on operating 
costs, uptime, and the overall performance of 
the business page 1 

■ Servers and other components in a data center 
require a steady stream of power, and UPSes help 
guard against the damage that can be caused by power 
outages, surges, and sags. Maximizing UPS avail- 
ability is an important part of any IT strategy to protect 
critical systems page 1 2 

■ Viridity, a data center management software com- 
pany located in Burlington, Mass., is a new arrival on 
the data management software scene page 1 4 

■ Product Spotlight: 

Data Center Flooring & Accessories page 1 6 

■ Product Spotlight: 

Specialty Racks & Cabinets page 18 

■ When done effectively, controlling airflow in 
the data center results in less downtime and longer 
equipment lifespans, conditions that every data center 
administrator wants to achieve page 20 

NETWORKING & VPN 

■ Making necessary changes to the security perimeter, 
including applying patches, changing software settings, 
or adding a new device, can be a nail-biting time for 
any organization. It's best to have good change control 
procedures in place page 1 

■ The ability to monitor application performance 

is paramount, and improving this ability has saved 
many a bewildered network manager from the perils of 
heated end users page 21 

■ Many organizations are beginning to focus on 
the commonalities of their voice, video, and data 
networks rather than their differences. The result 
is a holistic architecture that shares resources to 
more efficiently support users' growing technol- 
ogy needs page 22 

■ Are your enterprise's IT services Mac-friendly? 

Here are some tips to help page 23 

STORAGE 

■ Electronically stored information, or ESI, 
seems pretty self-explanatory, but a definition for it 
does exist page 30 



How Does Your 

Data Center's Location 

Impact Performance? 

Enterprises Look For Sites That Can Help Reduce Costs & Maximize Uptime 



by Cynthia Harvey 

Whether they're building 

their own facilities or looking 
for wholesale or colocation facil- 
ities, enterprises pay a lot of 
attention to the location of their 
data centers. That's because a 
facility's location can have a 
huge impact on operating costs, 
uptime, and the overall perfor- 
mance of the business. 



A data center's location can have a big 
innpact on its operational costs, uptinne, 
and the business' overall perfornnance. 

The right site can drannatically lower elec- 
tricity costs— one of a data center's big- 
gest operating expenses. 

Locations with easy access to fiber and 
nnultiple network providers, as well as low 
disaster risk, can nnaxinnize uptinne. 




Although every company has slightly dif- 
ferent criteria for the data center site selec- 
tion process, experts agree that a few factors 
are generally important to everyone. They 
include the availability and cost of power, the 



climate, the availability of net- 
work connections, the inherent 
risk of a location, and the site's 
proximity to metropolitan areas 
and other data centers. 

Cheap Power 

According to Pete Marin, 
president of data center devel- 
opment firm T5 Partners LLC 
(www.t5-mcf.com), "Power 
cost is a key driver in a data 
center. That's one of your larg- 
est operating expenses," he 
explains, "so locating abundant, 
cost-effective power is key." 

John Boyd, Jr., principal 
at location consulting firm 
The Boyd Company, agrees. 
"Operating costs are the most 
important," he says. "Data 
centers use a lot of electricity, 
so markets that have access to cheap, reli- 
able energy are looked upon with favor." 

Most American cities get their energy 
from coal-fired electric utilities, but coal 

Go to Page 10 



Recharge Your Change 
Control Process 

Solid Procedures Ensure Evaluation, Risk Assessment 



by Bill Hayes 
• • • 

Making necessary changes to the secu- 
rity perimeter, including applying patches, 
changing software settings, or adding a new 
device, can be a nail-biting time for any 
organization. It's best to have good change 
control procedures in place. 

According to Gartner vice president John 
Pescatore, security controls and security 
policy are interrelated, so changing security 



controls at the perimeter is essentially chang- 
ing security policy. "The risks are that vul- 
nerable internal resources may be exposed 
to external attackers, but the risk of acciden- 
tal internal exposures (such as data leakage) 
increases, as well," Pescatore says. 

IT operations teams typically view risks to 
end points in terms of unintended consequences 
Irom change, such as a patch package rendering 
a system inoperable or resulting in changes that 
Go to Page 10 



Key Points 



Change control procedures, especially for 
the security perinneter, are not optional. 

A good change plan has a tested back-out 
plan in case things go awry. Don't let crisis 
nnanagennent undo change control. Hurried, 
undocunnented fixes will conne back and 
haunt you sooner rather than later. 

Be sure to docunnent changes and regu- 
larly review those changes with your staff. 
Make sonneone responsible for reviewing 
and approving changes. 



The Processor.com home page is frequently updated with 
new articles and hardware news to help you keep current. 
Visit www.processor.com today. 
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SECURITY 

■ Cloud computing has been touted as the future of 
data storage, but like any heavily hyped technology, 
it comes with some red flags. The No. 1 caveat with 
cloud computing Is security page 28 

■ Recently, some high-profile cyberattacks have 
brought the phrase "advanced persistent threat," or 

APT, into more common use. Organizations of all types 
and sizes find these incidents troubling page 29 

STORAGE 

■ Buying Guide: Data Backup page 31 

■ Product Spotlight: Data Backup page 32 

■ Dealing with disaster is never easy, but there are 
methods organizations can use to better prepare them- 
selves for when an emergency does occur page 34 

■ In part because of HIPAA and the HITECH Act, archiving 
and retaining electronic medical records is a critical 
issue for healthcare-related businesses page 35 

MESSAGING & 
TELEPHONY 

■ The features and capabilities of unified commu- 
nications have a lot to offer small businesses, but 
it costs money to bring the different communication 
options into one integrated package page 36 

SERVERS 

■ Chenbro 6G Expanders are a reliable, flexible line of 
products designed to ensure compatibility. A number of 
features, including LSI controllers and SCSI Enclosure 
Services, offer enhanced capabilities page 37 

■ Buying Guide: Rackmount Servers page 37 

■ Product Spotlight: Rackmount Servers page 38 

CLIENTS 

■ The landscape for software management is chang- 
ing. A growing number of companies are choosing to 
move from traditional, on-premises software manage- 
ment solutions to SaaS page 40 

DATA CENTER 
MANAGEMENT 

■ Experts offer some pointers on how to recruit a new 
IT department or group page 41 

■ Corporate sustainability is an extension of today's 
eco-driven wave, and as long as IT leaders don't feel 
like they're being dragged into it, tech shops are opti- 
mally positioned to drive sustainability page 42 

■ The common definition of gray market is "the sale 
of equipment through channels that aren't licensed or 
authorized by the original manufacturer," and it's both 
legal and legitimate page 43 



News 



■ Cisco To Cut Its Workforce . . . 

Following the release of lackluster Q3 201 1 
financial results, Cisco announced plans to 
cut jobs in an effort to recharge profit. The job 
cuts— the number of which has not yet been 
determined— are part of CEO John Chambers' 
plans to slash $1 billion in expenses. The com- 
puter networking company's revenue stalled 
after initially recovering from the recession, 
growing just 4.8% to $1 0.9 billion from $1 0.4 
billion in Q3 2010; the company's net income, 
however, fell 1 1 % year over year to $1 .8 bil- 
lion, or 33 cents per share. Chambers also said 
that the company was abandoning its long-held 
goal of achieving 12 to 17% in year-over-year 
revenue growth each quarter because the goal 
is "not reflective of the environment." 

■. . . & Streamline Sales, Service 
& Engineering Divisions 

Cisco plans to undergo significant organizational 
changes to simplify the way it executes strategy, 
says Chairman and CEO John Chambers. In 
making the announcement, Cisco says it will 
focus on five key areas: core (routing, switching, 
and services), collaboration, data center virtual- 
ization and the cloud, video, and architectures 
for business transformation. The company's 
Worldwide Field Operations will be organized 
into three geographic regions: the Americas; 
Europe, Middle East, and Africa; and Asia Pacific/ 
Japan/Greater China. Cisco Services will align 
with Field Operations and organize around key 
customer segments. Cisco Engineering will focus 
its efforts on the five company priority areas, and 
the company's Council structure will 
be refined to cover three 
areas: Enterprise, Service 
Provider, and Emerging 
Countries. Most changes 
will take effect within the 
next 1 20 days. 



■ Symantec's Fourth-Quarter Profits 
Decline, Revenues Increase 

Security software vendor Symantec ended the 
fourth quarter of its fiscal year 201 1 earning a net 
income of $1 68 million, or 22 cents per share, 
down from $1 84 million in 04 201 0. The com- 
pany's full-year profit was $597 million, down from 
201 0's $714 million. Although the company's 
overall profit declined, its revenues increased 9% 
year over year, climbing from $1 .53 billion in 04 
2010 to $1 .67 billion this year. Symantec credits 
improved backup, SaaS, and data loss prevention 
sales for the increase in revenue. Looking ahead, 
Symantec anticipates 01 2012 earnings of 19 to 
20 cents per share and revenues between $1 .57 
billion and $1 .59 billion. 

■ India To Lead New Charge 
For Solar Power 

Lux Research predicts that India, South 
Africa, Russia, Brazil, Mexico, and the 
UK will become the leading consum- 
ers of solar technology in the next 
five years because there will no 
longer be as much demand in 




WATCH THE This information provides a quick glimpse of current and historical stock 
j^^^^ J^l^ prices and trends for 13 major companies in the technology market 
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the existing solar markets. In 2010, Germany and 
Italy accounted for about two-thirds of purchases 
in the solar market, but government subsidies are 
expected to be scaled back, so Lux Research 
believes that solar growth will level off in those 
countries. Japan, China, and the United States 
are other markets where large capacities of solar 
panels were installed, but the question of subsidies 
and solar penetration leaves the future of those 
markets unsure. In India, Lux says solar technol- 
ogy will likely need to be integrated with storage in 
order for off-grid applications to gain ground. 

■ Nvidia Buys Into Baseband, RF 
With Icera Acquisition 

Chip maker Nvidia is delving deeper into the 
mobile market with a new acquisition. The com- 
pany has agreed to buy Bristol, England,-based 
Icera, which makes low-power 2G to 4G wire- 
less baseband processors with RF components 
for mobile phones. Because 
Icera's Livanto and other 
chips are programmable, 
they can easily support 
multiple protocols for 
use on a variety of car- 
riers' networks. Nvidia 
expects Icera's products 
to complement Nvidia's 
Tegra mobile application 
processor in a smartphone and 
tablet platform going fonA/ard. The 
companies should finalize the $367 
million cash deal in early to mid-June. 

Sophos To Purchase Astaro 

Antivirus firm Sophos announced 
an agreement to acquire network 
security appliance and unified 
threat management vendor 
Astaro. Through the acquisition, 
Sophos, which specializes in 
endpoint, mobile, Web, and email 
security, says it will broaden the 
coverage of its product portfolio, addressing 
security in a more holistic, comprehensive fash- 
ion. Astaro, considered the fourth largest entity 
in the UTM market, has a significant presence 
in the region encompassing Europe, the Middle 
East, and Africa. Neither company released 
details regarding the financial aspects or time- 
line of the deal. 

■ Valuable Brands: 

Apple Takes Top Spot From Google 

For the first time ever, Apple ranked No. 1 on the 
BrandZ Top 100 Most Valuable Global Brands, 
compiled by Millward Brown Optimor. Apple post- 
ed a brand value of $153 billion to oust Google, 
which had been ranked No. 1 for four years 
straight. Google came in at No. 2. Other notable 
tech entrants on the top 10 include IBM at No. 3, 
Microsoft at No. 5, AT&T at No. 7, China Mobile 
at No. 9, and GE at No. 10. 



NOTE: This information is meant for reference oniy and sfiouid not be used as a basis for buy/seii decisions. 
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Could it be possible for data center space requirements 
to decrease? Gartner thinks so, saying four forces could 
dramatically shrink data center space requirements 
within the next decade: 

Smarter designs. Traditional methods of designing 
data centers were created during the mainframe 
era, Gartner says, which had minimal variation in 
operating temperature or power consumption dur- 
ing long periods of time. Today's data centers have 
different mechanical/electrical demands, which new 
designs need to take into account. 



Green pressures. As awareness of green IT has increased, 
new data center managers are taking a hard look at energy effi- 
ciency in both data center design and execution, Gartner says. 
PUE, in particular, is gaining ground, with new data centers 
being built to meet specific PUE targets. 

Conquering density. Although data center physical floor space 
may be nearing capacity, Gartner says, the actual compute 
space within racks and servers is poorly used. Average rack 
densities are about 60% worldwide; new designs could push that 
to between 85% and 90% density. 

Cloud computing. Data center managers are increasingly shift- 
ing nonessential workloads to cloud providers, freeing up floor 
space, power, and cooling. Gartner says this means the "new" 
corporate data center will focus on core business functions that 
differentiate the business from its competition. 



A Mixed Outlook For 

JOBS, CERTIFICATIONS 



Companies have changed the way they think about IT and how it's managed and deliv- 
ered, driving growth in pay and demand for specialized IT and business skills, says David 
Foote, co-founder, CEO, and chief research officer at Foote Partners. That shift in mental- 
ity has led to a slight increase in pay for select noncertified skills and a decline in pay for 
those with certain individual IT certifications. 

• "At this point, I don't think anyone should be surprised that skills acquisition, not 
recruiting full-time people, has been the bigger focus in the past few years," Foote says. 
Companies are increasingly hiring contractors, consultants, part-time employees, offshore 
vendors, and managed services/cloud computing providers. 





• "There's a brand new defini- 
tion of 'IT professional,'" Foote 
says. The new IT professional 
combines knowledge, experi- 
ence, and skill sets not associat- 
ed with traditional IT departments 
and workers. 



• "Technology and business skills have 
in effect collapsed into each other, creating 
legions of what our firm refers to generically as 
hybrid IT/business professionals," Foote says. New 
hybrid jobs and job titles are being created, and tradi- 
tional IT jobs have been changed and redefined. 



■ New Privacy Rules 
Adopted In India 

India has issued new rules that restrict how 
businesses handle personal information. 
With the spread of cloud computing adop- 
tion, IT organizations worldwide are seeking 
standardization of data protection laws to 
promote privacy so that cloud computing 
firms can move data internationally without 
fear of legal consequences. India's new 
Privacy Rules will require organizations 
to notify individuals by letter, fax, or email 
when their personal information is collected. 
Additional stipulations require organiza- 
tions to make a privacy policy available, 
implement measures to secure personal 
information, and set up a process to resolve 
disputes relating to the collection and use 
of personal information. 

■ Survey Details Consumers' 
Wish Lists For Health Apps 

In a survey conducted in March by the CHIC 
(Consumer Health Information Corp.), 91.1% 
of nearly 400 respondents indicated they're 
most interested in 
using health-related 
apps to gain medi- 
cal information. 
Specifically, 48.5% 
would like to use 
health apps to keep 
track of health informa- 
tion, while 58.4% want 
the app to help man- 
age a disease or drug. 
Nearly 80% said they'd 
be more likely to use a 
health app that could 
analyze data the user 
was logging and pro- 
vide feedback concern- 
ing how the user was 
doing. Another 39.8% 
indicated they're will- 
ing to use a health 
app several times 
daily, and respon- 
dents were most likely 
to use health apps 
to locate data about 
drugs (42.2%) or dis- 
ease states (26.5%). 
Ultimately, CHIC said 
"patients will not use a 
smartphone app simply 
because it is innova- 
tive or handy." Instead, 
they seek convenience and a way to simpli- 
fy their health-related tasks. Patients also 
want feedback from apps that are accurate 
and that follow clinical and behavior modifi- 
cation guidelines. 

■ Broadcom To Acquire SC Square 

Semiconductor maker Broadcom announced 
early this month that it has entered a definitive 
agreement to acquire Israeli security software 
developer SC Square. In a release, Broadcom 
said that in addition to acquiring SC Square's 
team of security-focused engineers, the acqui- 
sition continues the company's strategy to 
acquire "innovative technology and high-quality 
teams with a solid track record of execution." 
The deal is expected to cost Broadcom $41 .9 
million and complete sometime prior to June 30 
subject to the satisfaction of closing conditions. 
SC Square is a leading provider of security 
chip and communication solutions, offering 
smart card technology that's used in e-health, 
passports, ID cards, and credit and debit cards. 
The company boasts a team of engineers and 
specialists with extensive real-world experience 
in implementing smart card solutions. 

■ Apple Still Tops In Tablet Market Share 

According to the latest research from Niel- 
sen, the tablet market is still being dominated 



by Apple's iPad, with several other products 
elbowing for room in a small segment. The 
iPad occupies 82% of the market, with 43% 
going to Wi-Fi-only models and 39% to 3G 
+ Wi-Fi models. The second largest share 
of the market goes to the catch-all "Other" 
category, which makes up 9% of the market. 
Samsung's Galaxy Tab came in third with 
4%, and the Dell Streak (3%) and Motorola 
Xoom (2%) rounded out the top five. The 
great disparity can be attributed at least in 
part to the fact that the iPad hit the market 
before the others. 

■ Android Overtakes Smartphone 
OS Market Share 

Recent statistics from ComScore show that 
Google's Android operating system has 
surpassed BlackBerry in the United States 
as the dominant smartphone platform. Be- 
tween December 2010 and March 201 1 , 
Google's share increased to 34.7% of the 
market, up from 28.7%, while BlackBerry's 
share dropped from 31.6% to 27.1%. Apple 
saw modest improvement, increasing its 
share from 25% 
to 25.5% over the 
same time period, 
while Microsoft 
(7.5%) and Palm 
(2.8%) each saw 
a drop of 0.9%. 
Another finding of 
note is that smart- 
phone ownership 
increased 15% 
from December 
2010 to March 
2011, with 72.5 
million people 
now owning one 
of the devices. 

■ FTC 

Settles With 
Companies 

In what might 
be construed as 
a stern warn- 
ing to Web site 
developers and 
providers who 
collect sensitive 
user information, 
the Federal Trade 
Commission 
says that payroll 
provider Ceridian 
and immigration services software provider 
Lookout Services have settled charges that 
they failed to enact security measures suf- 
ficient to protect sensitive data. The two com- 
panies failed to secure consumer information, 
the FTC says, exposing some 65,000 users' 
personal information during recent security 
breaches. As part of the settlement, the 
companies have agreed to implement com- 
prehensive security programs and to obtain 
independent security audits every other year 
for the next 20 years. 




Google Facing DoJ Probe 



After taking a hit on mobile privacy issues 
related to the collection of users' location 
data by the company's Android devices, 
Google is now being investigated by the 
Department of Justice in connection with 
practices related to its advertising program. 
In connection with that probe, the company 
has earmarked some $500 million toward a 
possible settlement, the terms— and even 
the potential recipient— of which remain 
undisclosed. Google has therefore revised 
its first-quarter profit figures, dropping its 
expected profit from $2.3 billion to $1.8 bil- 
lion for the quarter, which ended March 31 . 
The company has declined to comment on 
the issue. 
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■ Microsoft Acquires Skype 
For $8.5 Billion 

Microsoft announced that 
it will buy video voice 
and communications 
company Skype for $8.5 
billion. The acquisition, 
Microsoft's largest ever, 
will give Microsoft access 
to Skype's customer base of 
more than 660 million users, about 107 
million of whom use Skype at least once 
a month. Analysts say that the acquisition 
gives Microsoft an advantage over Google 
in the Internet communications market. 
Microsoft CEO Steve Ballmer says the 
company will integrate Skype technology 
with many of its products, including Xbox, 
Outlook, and Windows Phone. Ballmer also 
said that Skype will still be available on compet- 
ing mobile OS platforms from Google and Apple. 
Other potential buyers for Skype included Google 
and Facebook. 

■ Federal Government 
To Close Data Centers 

By the end of 201 1 , the U.S. government 
will close 137 data centers, 39 of which have 
already been closed, according to a recent 
White House blog post by U.S. CIO Vivek 
Kundra. The government wants to close at 
least 400 data centers by the end of 2015. The 
Department of Defense will close 52 data cen- 
ters before the end of the year, which was the 
highest number of any government department. 
The Department of Interior operates 1 8 of the 
closures, while NASA runs 14. Other agencies 
that will lose data centers this year include the 
Departments of Agriculture, Homeland Security, 
Justice, and Energy. 




■ SSDs Going Mainstream 

Gartner reports that solid-state drives will be get- 
ting significantly cheaper throughout 2012, mak- 
ing them a top storage option for consumers. 
SSDs will achieve the magic $1-per-gigabyte 
price by the second half of 2012. SSDs have 
been popular among enterprise customers since 
2010, but consumers are only now beginning 
to purchase SSDs in thin and light notebooks. 
Gartner claims that the average selling price of 
NAND flash memory, the kind used in SSDs, will 
drop by 30% over the course of the rest of this 
year and another 36% from 201 1 to 2012. 

■ Mind Boggling Server Data 

Two teams of researchers from UC San Diego 
claim that as of 2008, the world's 27 million busi- 
ness servers processed 9.57 zettabytes of data. 
The researchers claim that this is equal to 20 
separate 5.6-billion-mile-high stacks of books 



piled high enough to reach Neptune. By 2024, the 
world's business servers will annually process data 
that equates to a stack of books 4.37 light-years 
high that stretches to Alpha Centauri. To calculate 
the data, researchers pegged the worldwide work 
force at 3.1 8 billion, with each worker responsible 
for an average of 3TB of information each year. 

■ Intel Creates New 
"Ivy Bridge" Chips 

Intel announced a breakthrough in transistor and 
computer chip technology with its creation of a 
22nm microprocessor codenamed "Ivy Bridge" that 
uses 3D Tri-Gate transistors. These small chips 
are designed to take up less space, help products 
be more energy efficient, and not take away any 
speed or processing power from larger chips. 
Although no partner companies or future products 
have been officially announced, Intel is working 
on a few prototype devices and foresees 
releasing the new chips sometime j 
by the end of this year 
or early next 
year. 




■ Bl Study Points To Dissatisfaction 

When it comes to Bl (business intelligence), about 
half of non-technical users of the systems report 
dissatisfaction, according to a survey conducted by 
LogiXML. When you include technical workers, the 
overall satisfaction improves, with 38% reporting 
some level of dissatisfaction. About 20% of enter- 
prises aren't using any type of Bl technology, and 
the most common reasons for the lack of Bl tech- 
nology are cost (27%) and lack of IT staff (26%). 
Ease of use was the key concern for those who 
did use the systems. One common concern the 
survey identified is that organizations are buying or 
using Bl tools without involving the IT department. 

■ EHRs Leave Positive 
Environmental Footprint 

According to a recent 
study released by 
Kaiser Permanente 
regarding the envi- 
ronmental footprint of 
its KP Health-Connect 
EHR (electronic health 
record) system, growing 
EHR use in the medical field 
will likely produce environmental 
benefits. According to the firm, 
KP HealthConnect enables a more 
efficient way for patients to commu- 
I nicate with clinicians and new ways 
I to share information in both inpatient 
and outpatient situations. The report 
revealed a substantial decline in gas- 
oline consumption — about 3 million 
gallons per year— for patients using 
the KP HealthConnect service (due to 
the lack of need to visit the health clinic), a 
1 ,000-ton reduction in paper use, and reduc- 
tion in X-ray film use by about 68 tons. 
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The Processor Product Releases section 
includes brief overviews of data center products. 

All products listed have been released recently, so use this section to get 
up-to-date with what's new on the market and to find products you need. 



Manufacturers: 

Do you have a new product that data center/IT 
managers would be interested in learning about? 

Send your press release or product information 
to press@processor.com. 



Physical Infrastructure 



■ ATEN KVMP Switches 
CS1782A, CS1784A 

ATEN says that its two new two- and 
four-port USB DVI Dual Link KVMP 
switches are the first in the industry to 
support 3D video. The P in the products' 
KVMP designation stands for peripherals, 
as the units support USB 2.0 devices. 

■ Belkin Advanced Secure KVM 

Six new KVM switches are on the way 
from Belkin, bringing security innovations 
to government agencies in the defense 
and intelligence communities. The two- 
and four-port units come with optical data 
diodes that guarantee single-direction data 
paths in ways that traditional electronic 
circuits can't, Belkin says. In addition, 
the new KVMs feature dedicated resourc- 
es for each port to eliminate data leak- 
age among ports. Should a breach occur, 
Belkin says, the intruders won't be able to 
log keystrokes or capture upstream data. 
Currently undergoing EAL2 and other 
security standard validation, the Advanced 
Secure KVMs will ship in June in tamper- 
evident packaging. 

■ Cisco Containerized Data Center 

Cisco announced the Containerized 
Data Center, a modular data center built 
in a weatherized ISO container that is 
designed to address the ever-changing 
networking needs of organizations. The 
Containerized Data Center features an 
open architecture and a transportable 
platform, efficient continuity of oper- 
ations in case of a disaster, increased 
energy efficiency and power density, and 
reduced risk. 

■ Cyber Switching 
Single-Phase ePower iPDUs 

Cyber Switching announced new single- 
phase versions of its ePower iPDUs (intel- 
ligent power distribution units). In addition 
to meeting or exceeding environmental 
requirements, features of the iPDUs include 
remote management options, an interactive 
color LCD touchscreen, power metering 
and control on each outlet, IPv4 and IPv6 
dual-stack support, and support for Cisco 
Energy Wise v2.5. 

■ ITWatchDogs Web-Based 
Climate & Power Monitoring Systems 

ITWatchDogs announces its partnership 
with HM Cragg as an authorized distribu- 
tor for its Web-based climate and power 
monitoring systems. Using the systems, 
data center administrators can track tem- 
perature, humidity, airflow, light, sound, 
power, water leaks, live video feed, and 
more on the Web. If sensor values fall 
outside user- adjustable thresholds, users 
can receive alerts via email, SMS, SNMP 
traps, or voice call. The ITWatchDogs 
units are small, compact, and fully cus- 
tomizable and enable surveillance of user- 
defined criteria for IT and data center 
equipment. Admins can set multiple levels 
of access, ensuring employees or clients 
see only the information they need. 

■ MovinCool PC7 

The MovinCool PC7 personal space/ 
spot cooler is now more powerful. The 
$595 portable air conditioner runs on stan- 
dard llOV power and "green" R-410A 
refrigerant. It supplies 9,000 BTUs of 
cooling per hour — a 30% boost from 



previous versions. A flexible duct vents 
heated air out a window. The PC7 doesn't 
require a condensate tank or drain line to 
get rid of condensation. 

■ Tate DirectAire X2, 
SmartAire, PowerAire 

The new DirectAire X2 airflow panel 
from Tate divides 2,600cfm of airflow in 
two directions to cool up to 25kW per rack 
in a raised floor setting. Also available are 
new control options for the company's 
SmartAire variable-air-volume dampers 
and PowerAire fan-assist modules. 

■ Thomas & Betts Joslyn Products 

Thomas & Betts released a new line of 
Joslyn surge protection devices designed 
to protect sensitive equipment from dam- 
age caused by electrical power surges, 
transients, and noise. The new devices can 
handle single, split, and three-phase appli- 
cations between 120V and 600V Delta and 
high-surge energy to 400kA per phase. 



Networking & VPN 



■ BMC Software Cloud Management 
Portfolio Enhancements 

BMC Software announced enhance- 
ments to its cloud management portfo- 
lio. With its second-generation Cloud 
Lifecycle Management solution, the com- 
pany offers enterprises, public agencies, 
and service providers the ability to build 
and manage highly flexible cloud ser- 
vices across public and private hybrid 
cloud environments. The cloud manage- 
ment portfolio is part of BMC's Dynamic 
Business Service Management platform, 
which offers organizations unified man- 
agement abilities across physical, virtual, 
and hybrid environments to help reduce 
costs and build an evolutionary path to 
cloud adoption. Among the enhance- 
ments is a newly introduced policy-based 
Service Governor. 

■ Dell Boomi AtomSphere Spring 11 

Dell announced enhancements to Dell 
Boomi, the company's cloud integra- 
tion technology, with the release of Dell 
Boomi AtomSphere Spring IL Boomi 
AtomSphere Spring 1 1 is designed to help 
users both start using new cloud and SaaS 
applications and connect to existing appli- 
cations. New features include enhanced 
middleware connectivity, large-scale data 
management and migration options, and 
anywhere integration monitoring. 

■ Fluke TL175 TwistGuard Test Leads 

Fluke released the TL175 TwistGuard 
Test Leads, which let users manual- 
ly adjust the length of the probe end to 
safely measure CAT III 1000 V, CAT 
IV 600 V, and CAT II 1000 V. Fluke's 
TL175 TwistGuard Test Leads feature 
WearGuard insulation and are currently 
available starting at $23.65. 

■ ForcelO Networks Open Automation 2.0 

Force 10 Networks announced Open 
Automation 2.0, an expansion of its Open 
Automation Framework. The standards- 
based approach to network automation 
optimizes data center network perfor- 
mance and efficiency and lays the foun- 
dation for cloud-based services. Open 
Automation 2.0 extends these capabili- 
ties with the new DevExchange develop- 
ment community and ScriptStore, an open 
exchange for SmartScripts. 



■ ForcelO Networks 
Open Cloud Networking 

The OCN (Open Cloud Networking) 
framework from ForcelO Networks is 
designed for cloud and conventional data 
centers and is built on open architectures, 
open automation, and open ecosystems. 
The OCN framework is powered by a new 
family of centralized and distributed core 
switches, a ToR (top of rack) open cloud 
switch, and automation software. 

■ ForcelO Networks 

S-Series S7000 Open Cloud Switch 

Data center operators will get new lev- 
els of integration with the improvements 
ForcelO Networks has made to its ToR 
(top of rack) networking equipment. The 
S-Series S7000 Open Cloud Switch is a 
new type of ToR node that combines stor- 
age and application processing capabilities 
in a single 2U space. 

■ ForcelO Networks Z-Series ZettaScale 

ForcelO Networks has announced the 
Z-Series ZettaScale core switches, which 
make a generational leap in density and 
performance. The new Z9000 distributed 
core switch delivers scalability and perfor- 
mance in an ultra- small form factor. For 
conventional data centers, the new Z9512 
chassis-based switch delivers high density 
and 9.6 terabits of switching capacity in a 
half-rack unit. 

■ Infoblox DDI Solution 

Infoblox announced a DDI (DNS, DHCP, 
and IP AM) solution designed to automate 
and manage the IPv4-to-IPv6 transition 
life cycle. Expanding on the company's 
existing IPv6 support in its previous DDI 
solutions, the new solution is designed 
to make the IPv4-to-IPv6 transition easier 
for service providers, educational institu- 
tions, e-commerce retailers, and the like. 
Features include IP address management 
functionality from a single GUI, AAAA 
records for DNS resolution, task delega- 
tion, automation for complex tasks, and 
automated IPv6 network change and config- 
uration management. Additionally, the solu- 
tion includes DNS64 support and dynamic 
assignment and delivery of an IPv6 address 
to all IPv6 devices. 

■ Juniper Networks Universal WAN 

Juniper Networks unveiled the Uni- 
versal WAN solution, which consists of 
new and enhanced Edge and Branch rout- 
ers that enable users to support mobile, 
video, and cloud computing applica- 
tions. Juniper's Universal WAN offer- 
ing features QFabric architecture, which 
streamlines data center-to-data center con- 
nectivity for distributed enterprises. 

■ Meru Networks AP400 Mobile Edge 

Meru Networks released its AP400 
Mobile Edge access point platform, 
aimed at helping IT organizations man- 
age a smooth and accelerated transfor- 
mation of their enterprise edge networks 
from wired Ethernet switches to the Mobile 
Edge wireless architecture. Featuring a 
maximum total data rate of l.SGbps, the 
AP400 Mobile Edge platform delivers a 
flexible, software-configurable mobile edge 
architecture that's purpose-built for high- 
performance enterprise mobility; supports 
indoor and outdoor use; and is compat- 
ible with mobile devices such as iPads, 
iPhones, and Android-based smartphones 



and tablets. The platform allows users to 
access high-definition video, wireless VoIP, 
and other multimedia applications. 

■ NetScout Systems 
nGenius Enterprise Intelligence 

NetScout Systems announced nGenius 
Enterprise Intelligence, an integrated mod- 
ule for the company's nGenius Service 
Assurance solution. Designed to close 
the gap between network and application 
performance analysis, nGenius Enterprise 
Intelligence uses network traffic informa- 
tion and hop-by-hop views to determine 
performance and latency of application 
traffic across data centers and cloud envi- 
ronments and provide a unified view of 
user experience. 

■ NextComputing 
Continuum Traffic Generator 

NextComputing has released the Con- 
tinuum, a traffic generator capable of 
transmitting packet streams at line rates 
reaching up to 25Gbps. The generator is 
aimed at IT administrators, network engi- 
neers, and field technicians who trouble- 
shoot or stress-test high-speed enterprise 
networks. The release combines off-the- 
shelf hardware with intelligent network 
adapters and preconfigured, open-source 
software. The Continuum ships in an all- 
in-one chassis with an integrated monitor. 

■ Quest Software PacketTrap MSP 

Quest Software has released the latest 
version of PacketTrap MSP, an SME- 
oriented platform for remote monitor- 
ing, management, and service delivery. 
PacketTrap MSP now includes VIPRE 
Antivirus software, a Global Policy Man- 
agement interface, custom dashboard 
gadgets, and support for out-of-the-box 
monitoring of Cisco Nexus switches and 
VMware ESX and ESXi. 

■ Radware ADC-VX OS 28 

Radware announced the ADC-VX OS 
28, the latest addition to its VADI (Virtual 
Application Delivery Structure) portfo- 
lio. ADC-VX OS 28 is designed to provide 
unique services that ease the transition to vir- 
tual data centers and cloud computing envi- 
ronments. Features include physical-to- virtual 
migration, virtual-to- virtual migration, vADC 
(virtual application delivery controller) tem- 
plates, and vADC service redundancy. 

■ Red Hat CloudForms 

Red Hat has announced CloudForms, 
a solution the company says helps create 
and manage laaS (infrastructure-as-a-ser- 
vice) private and hybrid clouds. The release 
includes comprehensive application life- 
cycle management and the ability to create 
integrated clouds from various computing 
resources with portability across physical, 
virtual, and cloud computing resources. 
CloudForms can create hybrid clouds from 
existing computing resources such as vir- 
tual servers, public clouds, and traditional 
in-house or hosted physical servers. 

■ Red Hat JBoss Enterprise Data Grid 

Red Hat has launched JBoss Enterprise 
Data Grid 6, a cloud-ready, scalable dis- 
tributed data cache that eases the load on 
database servers, reduces response times 
in applications, and provides additional 
failure response. The release is based on 
the JBoss Community project Infinispan 
and will be accessible initially via an Early 
Access Program. 
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■ Riverbed Technology 
Steelhead Appliances 

Riverbed Technology announced that its 
Steelhead appliances have been optimized 
for Microsoft RemoteFX. Features include 
an enhanced VDI (virtual desktop infrastruc- 
ture) user experience over a WAN, opti- 
mized RDP traffic, and advanced codecs. 

■ SuperLumin Networks 
Nemesis Version 2.2 

SuperLumin Networks announced 
Nemesis version 2.2, which offers updated 
features available in media proxy appli- 
cations. Nemesis 2.2 addresses today's 
increasing demand for streaming video and 
rich media on the Web, while focusing on 
safeguarding Web accessibility for varying 
user authentication. Other features include 
a Web-based management console, sup- 
port for SNMP version 2c, and a custom or 
localized error page specification. 

■ TE Connectivity QUAREO 

TE Connectivity unveiled QUAREO, a 
patented connection point technology that 
makes it possible to electronically trace, 
monitor, and authenticate every connec- 
tion from the data center to the desktop. 
QUAREO connectors have an advanced 
chip technology that provides a unique 
connection point identification that records 
the real-time status of each fiber and cop- 
per connection point. 



Storage 



■ Acronis Backup & Recovery 11 

The latest version of Acronis Backup & 
Recovery combines two often- separated 



functions in a single product, with data 
recovery and data backup included in one 
system. Acronis Backup & Recovery 11 
can help simplify disaster recovery and 
data protection needs across physical, vir- 
tual, and cloud environments, the com- 
pany says. 

■ Arkeia Progressive 
Deduplication Upgrade 

Arkeia has announced an upgrade that 
will provide source-side progressive dedu- 
plication for all of the company's back- 
up appliances shipped since July 2007. 
The firmware upgrade will deliver all the 
new features in Arkeia Network Backup 
Version 9.0, including two-phase backups 
for shorter backup windows, AES-256 
encryption, and enhancements to the Web 
user interface. 

■ Ciphertex CX-RANGER-EX 

The Ciphertex CX-RANGER-EX is 
a portable RAID unit with 256-bit AES 
hardware encryption. The five-bay, 3.5- 
inch drive RAID array has a 15TB capac- 
ity with current drives, expandable to 
60GB when four units are combined 
with a RAID card. Supported interfaces 
include eSATA, FireWire 800Mbps, Dual 
FireWire, and USB 3.0. 

■ Crossroads Systems 
ReadVerify Appliance 4.0 

Crossroads Systems has released ver- 
sion 4.0 of RVA (ReadVerify Appli- 
ance), aimed at helping organizations 
save time and money by validating the 
integrity of tape library systems. The 
company says that the new release, com- 
patible with VMware ESXi 4.1 virtual 



environments, improves tape system 
efficiency in virtual environments. 

■ EMC Integrated Tools With Microsoft 
Applications & Technology 

EMC announced new products designed 
to integrate with Microsoft applica- 
tions and technologies to provide sim- 
plified storage provisioning and elimina- 
tion of manual scripting for protection 
and discovery. New tools and features 
include the EMC Performance and 
Resource Optimization pack, EMC VNX, 
EMC Replication Manager, EMC Total 
Protection, EMC Efficiency Software, 
EMC VMAX, and EMC VPLEX. 

■ Iomega StorCenter PX Series 

Three new Iomega NAS systems are 
designed and tested by EMC for SMBs 
and distributed enterprises. The new 
StorCenter PX line features the desktop 
models px4-300d ($799.99 bare) and px6- 
300d ($1,199.99 bare), plus the rackmount 
px4-300r ($2,299.99 bare). All feature 
Intel dual-core processors and Iomega 
Personal Cloud Technology. 

■ Maxava HA Enterprise+ 

Maxava has announced the release of 
Maxava HA Enterprise+, which integrates 
the company's CSF (Command Scripting 
Functionality) with its new maxView 
Manager interface to provide enterprises 
with high availability and disaster recov- 
ery capabilities. Enhancements include 
capabilities for building fully scripted 
routines, accessibility via Web-enabled 
devices, and IBM i functionality. Maxava 
is offering customers of its HA Enterprise 
solution a free upgrade to HA Enterprise+. 



■ Nexsan E-Series 

Nexsan has a new line of E-Series stor- 
age systems with 3TB SATA drives. 
These systems use the Nexsan Flexible 
Storage Platform and are high-capacity but 
also low on power consumption. Specific 
examples of these systems include the 
E60, El 8, and E60X. Some systems can 
hold up to 45TB of storage per U. 

■ Sans Digital EliteSTOR 
Rackmount Storage Systems 

Sans Digital launched a line of rack- 
mount storage systems, based on the 
EliteSTOR 6G SAS expander JBOD. 
The EliteSTOR ES208X6+BHA (2U 
eight-bay), ES316X6+BHA (3U 16- 
bay), and ES424X6+BHA (4U 24-bay) 
provide RAID 60 capability and up to 
24Gbps bandwidth via a Mini-SAS cable, 
plus 6Gbps SAS and SATA HDD support. 

■ Seagate Barracuda XT STB Hard Drive 

Seagate announced new technology that 
allows the company to fit 1TB of storage 
onto one disk platter. The Barracuda XT 
3TB hard drive will be one of the first 
drives from Seagate to feature the technol- 
ogy, and there will be 1TB, 1.5TB, and 
2TB drives available, as well. 

■ Symantec Backup Exec 

Symantec announced cloud support for 
three of its products: Backup Exec 2010, 
Backup Exec Cloud, and Backup Exec 
Appliance. All three have been designed 
to now work with virtualized environ- 
ments to provide better backup options 
and improved security tools. 
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CoolBalance 



When you want it your way. 




Options I Flexibility | Lower Cost 



What we can do: 

■ Provide a wide variety of sizes, from 5x5 inclies to 
1 0x24 inclnes (and more) 

-Square cut outs: 6x6, 8x8, 1 0x1 inclies, etc 

- Long and narrow: 5x10, 5x14, 5x20, 5x24 
inclnes, etc 

- Circle seals for superior sealing: 4 and 6 inch 
diameters 

• Custom-build sizes at off-th e-s he Jf prices 

What you can do: 

■ Order lessthan a"box"fufl 

■ Modify the seal for a special application 

- Install brush to seal inside your cabinets 

- Seal your PDU 



The CoolBalance brush seal with XtraSeal™ 
technology is more effective than double-bmsh 
seals. XtraSeal, an impervious yet flexible 
membrane, prevents leakage of pressurized air 
around power and data cables in floor cutouts. 



www*coolbalance.biz 

email: c00lbalance@seale2e.com 
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SEALEZE 



Oncore's Colored Po 

Help You Differentiate 
YourA&B Power Feeds! 




o C13/C14 
o C19/C20 
o 5-15P/C13 
o And More 

Sold through distribution 



Four vibrant colors. Get rid of the confusing "black power cord nness" inside 
your server cabinet. Now you can use specific colors to identify critical devices 
with and without redundant power. Cords are available in green, yellow, red, 
and blue, with custom colors also available. 

Eliminate the slack. We offer our power cords in exact lengths — even in inches. 
In addition to providing an organized and maintained work environment, 
having the exact length of power cords will greatly improve your server room's 
performance by minimizing the amount of clutter in an enclosure, which 
increases airflow and the life of the equipment. 

Jacket flexibility. Oncore's power cords have a soft, flexible jacket for 
easy maneuvering inside the cabinet. The cord's flexibility is extremely 
important, especially when the cables have to make tight turns. In addition, our 
cables aren't shipped as a coiled cable with a tie wrap, which can cause kinking. 
They are shipped in bundles of 10, loose in the bag, which keeps the power 
cables in their natural state and free of kinks. 

Data center- and lab-rated. Our power cords have been designed specifically 
for data center and lab environments. All of our cables carry a UL certification 
and are RoHS-compliant. In addition, they are rated to 250V, which can be used 
in either the United States or Europe. 



Oncore Cables LLC 

45 Post' Irvine, CA 92618 I (949) 777-2255 • www.oncorecables.com 
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Continued from Page 7 

■ Symantec Enterprise Vault 10 
& Enterprise Vault. cloud 

Symantec announced Symantec Enter- 
prise Vault 10 and Enterprise Vault.cloud. 
Symantec Enterprise Vault 10 software 
can integrate with Symantec's data loss 
prevention and encryption technologies to 
archive and discover organizations' infor- 
mation without compromising confiden- 
tial information. Symantec's SaaS-based 
Enterprise Vault.cloud will offer unlimited 
cloud storage for email for a flat fee per 
mailbox per month. 

■ Symantec Veritas 
Operations Manager 4.0 

Symantec released the newest ver- 
sion of its Veritas Operations Manager. 
Version 4.0 of the management platform 
is designed for Veritas Cluster Server and 
Storage Foundation. It improves monitor- 
ing and analyzing capabilities for physical 
or virtual storage. 



Security 



■ CREDANT Technologies 
Enterprise Server 7.1.1 

CREDANT Technologies announced 
the newest version of its Enterprise Server, 
version 7.1.1. Enterprise Server 7.1.1 fea- 
tures support for Microsoft BitLocker, 
which can be used in the same console 
as existing encryption solutions. It also 
has more advanced reporting that pro- 
vides support for state data breach laws, 
HIPAA, and PCI compliance. CREDANT 
has added support for Mac OS X and 
removable media so companies can 
protect data stored on removable stor- 
age devices. Enterprise Server 7.1.1 is 
designed to improve security with public 
and private cloud-based environments. 

■ EdgeWave Email Data Compliance 

EdgeWave released its Email Data 
Compliance solution, which helps orga- 
nizations prevent outbound email data 
leaks. Available as an appliance or a 
hosted service. Email Data Compliance 
leverages EdgeWave' s exclusive analy- 
sis technology that scans for and blocks 
private data from leaving the network, 
including personally identifiable infor- 
mation. Social Security numbers, credit 
card numbers, and patient health informa- 
tion. The offering helps users comply with 
PCI DSS, Gramm-Leach-Bhley, HIPAA, 
and HITECH. Email Data Compliance's 
lexicons and logic engine allow precise 
deterministic analysis, and its proprietary 
technology keeps latency low. 

■ Entrust PIV-I 

Entrust announced the extension of 
its Non-Federal Identity SSP service 
to encompass PIV-I (Personal Identity 
Verification-Interoperable) in multiple 
sectors. PIV-I is based on the same 
standards used by the federal govern- 
ment but is designed for state, local, 
and enterprise vendor use. Supported 
by Entrust' s PKI platform and creden- 
tialing services, PIV-I credentials com- 
ply with Homeland Security Presidential 
Directive 12 and are for agencies using 
the USAccess program or other large 
government agencies. Entrust' s PIV-I 
solution features smartcard components 
from XTec's AuthentX identity manage- 
ment solution products. Other platform 
features and capabilities include logical 
credentialing; security layering across 
numerous users; and authentication of 
passwords, IP geolocation, devices, 
out-of-band one-time passcodes, eGrid 
cards, and digital certificates. 



■ MSG Security 

Web Filtering & Reporting Suite 4.1 

M86 Security released version 4.1 of 
its WFR (Web Filtering and Reporting) 
Suite. This version includes VuSafe for 
K-12 schools, which lets educators find, 
tag, and manage a secure media library 
to prevent students from viewing inap- 
propriate videos, comments, and ads. The 
solution combines VuSafe' s video library 
management capabilities with WRF's 
ability to block and filter Web sites and 
applications for more thorough control 
over Web access. 

■ nCircle Benchmark Metrics Pack 
For Identity & Access Management 

nCircle announced its nCircle Bench- 
mark Metrics Pack for Identity and Access 
Management, a tool designed to allow 
users to compare the performance of their 
entire IT security systems with their inter- 
nal goals as well as against those of others 
in the same industry. The product is avail- 
able in a free Basic edition. 

■ Symantec Endpoint Protection 12 
& Protection Center 2.0 

Symantec announced its new Endpoint 
Protection 12 and Protection Center 2.0 
security solutions. Endpoint Protection 
12 provides enhanced security measures 
to detect and block new threats earlier. 
Protection Center 2.0 is a management 
console for monitoring multiple security 
solutions at the same time. 

■ Symplified Mobile Edition 

Symplified has announced Symplified 
Mobile Edition, which secures cloud and 
Web apps on any mobile device so enter- 
prises can safely make corporate data 
accessible on tablets and smartphones. 
Symplified Mobile Edition lets businesses 
provide employees with single sign-on 
and enforce access policies on cloud and 
on-premises apps regardless of the user's 
access device. 

■ Voltage Security Page-Integrated 
Encryption & SecureData Web 

Voltage Security released PIE (Page- 
Integrated Encryption), a new encryp- 
tion product aimed at protecting personal 
data entered by consumers on Web pages. 
The company also announced the Voltage 
SecureData Web data protection solu- 
tion, which Voltage says also uses the PIE 
encryption protocol to help e-commerce 
merchants protect account number data 
exchanged in Web transactions. The com- 
pany says PIE helps merchants retain con- 
trol during payment capture without having 
cardholder data present in their systems. 



Messaging & Telephony 



■ Polycom Telepresence Products 

Polycom launched three new products 
in its telepresence portfolio: the EagleEye 
Director room camera tracking system, the 
HDX 4500 executive desktop telepresence 
system, and the mobile telepresence ml 00 
solution. The three products power tele- 
presence applications for conference 
rooms, desktops, and SMBs. 

■ Red Earth Software 
Policy Patrol Signatures 

The new Policy Patrol Signatures corpo- 
rate email signature uniformity tool from 
Red Earth Software works with Microsoft 
Outlook and Outlook Web Access. With 
Policy Patrol Signatures, companies 
can ensure uniform corporate email sig- 
natures and disclaimers. It uses Active 
Directory merge fields to allow for per- 
sonalized signatures for senders. Policy 



Patrol Signatures is certified for use with 
Windows Server 2008 R2. 



Servers 



■ Fujitsu PRIMEQUEST1800E2 

Fujitsu launched the PRIMEQUEST 
1800E2, which is the latest model in 
its PRIMEQUEST 1000 series of high- 
performance servers aimed at enterprise 
applications and cloud and virtualization 
environments. The new model, available 
worldwide, features Intel Xeon E7 proces- 
sors, and the company says the server is 
1.2 times as fast as previous models. The 
server is compliant with Red Hat Enterprise 
Linux, Microsoft Windows Server, and 
VMware vSphere operating systems. 

■ SGI Rackable & CloudRack C2 

SGI announced a variety of enhance- 
ments available in its Rackable and 
CloudRack C2 server lines. First up are 
new preconfigured solutions with the 
open-source programming framework 
Hadoop as the overlying application layer. 
The solutions span data-intensive applica- 
tions, cloud storage, social networking, 
and other areas. Also new is the D-Rack 
(destination rack) cabinet with a highly 
flexible configuration, including back-to- 
back and water-cooled. 

■ Supermicro X9 Embedded Server 

Supermicro added an ultra-compact 
X9 solution to its Embedded Server 
Building Block Solution line that's opti- 
mized with Intel's second-generation 
Core processor family and Intel QM67 
Express chipsets. Supermicro says the 
X9 embedded solution provides 25% 
better performance while cutting power 
consumption vs. the previous genera- 
tion. PCI-E 2.0 xl6 and remote manage- 
ment support is also included. 



Clients 



■ Dell Precision M4600, M6600 & R5500 

Dell announced its new Precision M4600 
and M6600 mobile workstations as well 
as the Precision R5500 rack workstation. 
The M4600 is 15.6 inches, and the M6600 
is 17.3 inches, and both are designed to be 
mobile, high-performance computers. The 
R5500 is a rack workstation with a dual- 
socket rack form factor. 

■ FieldView Solutions FieldView 4.0 

FieldView Solutions announced the 
release of its data center efficiency solu- 
tion, FieldView 4.0, a scalable data col- 
lection engine that manages resources as 
a Web-based reporting tool. FieldView 
4.0 includes support for Modbus/SNMP/ 
BACnet/XML/OPC, accommodates mil- 
lions of end points, and is accessible to 
unlimited users. 

■ HP LaserJet Enterprise 
M4555 &Pro M1217nfw 

HP introduced two new networked 
MFPs, the HP LaserJet Enterprise M4555 
MFP and the HP LaserJet Pro M1217nfw 
MFP. The enterprise-centric M4555 fea- 
tures HP Web Jetadmin for monitoring 
and management. The SMB-focused 
M1217nfw is an inexpensive wireless 
LaserJet MFP that features HP Smart 
Install, which enables rapid CD-free driv- 
er installations. 

■ HP rp5800 Retail System 

HP released its rp5800 Retail System 
high-performance solution for point-of- 
sale retail environments. New optional 
accessories include the HP L1506x 
15-inch LED Monitor for point-of-sale, 
the HP Integration Assembly for added 



security and component protection, and 
the HP Self-Service Kiosks with Virtual 
Sales Assistant software. 

■ OKI Data Americas 
pro920WHT 

OKI Data Americas announced the 
addition of the pro920WHT to its pro- 
Color Series of digital laser printers aimed 
at color-critical applications in graphic arts 
and production environments. Available in 
July, the pro920WHT utilizes white toner, 
allowing direct, low-cost imaging to dark 
or colored media, signage, and films. The 
pro920WHT will be available for $7,495 
and offers up to 31ppm color and 36ppm 
mono speeds and high-definition color 
printing at up to 1,200 x 600 dpi. 

■ Oracle Business Intelligence 
Software Suite 

Oracle announced version 11.1.1.5 of 
its business intelligence products, includ- 
ing Oracle Business Intelligence, Oracle 
Business Intelligence Applications, and 
Oracle Real-Time Decisions. New capa- 
bilities include iPad and iPhone support, 
extended OLAP and in-memory platform 
support, enhanced real-time decision man- 
agement features, and new certifications. 
The latest version lets users initiate actions 
and workflows from their mobile devices. 

■ Pervasive Software Pervasive Move, 
Connect & Protect 

Pervasive Software announced Per- 
vasive Move, Pervasive Connect, and 
Pervasive Protect, packaged subscrip- 
tion-based offerings that touch on all 
phases of the cloud application lifecy- 
cle. The programs also allow partners 
to address data quality issues during 
early stages of cloud integration proj- 
ects. Pervasive Move addresses the first 
phase of the cloud application data ser- 
vices life cycle, which often involves 
migrating data from the existing system. 
Pervasive Connect consists of Pervasive 
Data Integrator, which provides con- 
nectivity to virtually every application 
in the cloud and on-premises ecosystem, 
with no per-connector fees. Pervasive 
Protect allows for data validation of 
cloud application data and provides 
tools to enhance and protect data from 
future duplicates or incomplete entries. 

■ PortSO httpZip 4.0 

PortSO introduced the latest version of 
its HTTP compression tool for IIS, httpZip 
4.0. The offering now supports all versions 
of Server 2008 and Server 2008 R2 (IIS 7.0 
and IIS 7.5) as well as 64-bit editions of all 
Windows Server platforms, while continu- 
ing to provide advanced control of IIS com- 
pression. Port80's httpZip 4.0 is currently 
available for $349.95 per server. 

■ Supermicro PWS-406P-1R 

Supermicro' s SuperServers have a new 
lU, 400W power supply option in the 
PWS-406P-1R. Billed as a short-depth, 
redundant power module, the PWS-406P- 
IR meets Energy Star Server 2.0 specifi- 
cations for efficiency superior to 80 Plus 
Gold. It's intended for embedded applica- 
tions and industrial PCs. 

■ Webalo BlackBerry Client 

Webalo announced that it has made 
its BlackBerry client available in the 
BlackBerry App World as a free download 
that enhances the abilities of BlackBerry 
smartphones as enterprise computing 
devices. The app is designed to provide 
an enterprise-to-mobile connection that 
allows for access to various enterprise 
resources via a subscription to the com- 
pany's cloud-based service. 
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How Does Your Data Center's Location Impact Performance? 



Continued from Page 1 

can be very expensive and polluting. As 
a result, areas that offer cheaper, greener 
hydropower and nuclear power are very 
attractive to data centers. 

Cool Climate 

A data center's location not only affects 
electricity costs, it also impacts the amount 
of electricity needed to run the data center. 
One of the biggest energy drains in a data 
center is the cooling system. If a data center 
is located in a more temperate climate, it 
may be able to use less expensive methods 
of cooling the facility. 

Douglas Alger, IT architect at Cisco 
Systems and author of "Grow a Greener Data 
Center," explains that air economizers "allow 
you to draw in some of your outside air and 
use that to cool your data center rather than 
running your condensers from your own cool- 
ing infrastructure." He adds, "The condensers 
are what consume the greatest amount of 
energy in the cooling system, so if there are 
certain hours per day or days per year that you 
don't have to do that, you can kind of lever- 
age Mother Nature." 

According to Alger, some companies 
have even considered placing data centers 
in areas such as Greenland specifically to 
take advantage of the natural cooling. 

Fiber Infrastructure 

Another location factor that has a huge 
impact on data center performance is the 



network infrastructure. "Obviously, you 
need to be in a market with fiber-optics 
infrastructure," Boyd says. 

According to Marin, different compa- 
nies have different requirements for their 
network infrastructure. "Some data centers 
want to be right on that long haul," he 
says, while others are willing to build to 
the network. "As a developer, we want to 
have as many fiber providers to our loca- 
tion as possible," he adds. "We also want 
to have dark fiber to our location." 

Because this network infrastructure pro- 
vides a data center's link to customers, 
suppliers, and the rest of the company, fast 
and redundant connections are important. 

Maximum Uptime 

Companies also want to place their data 
centers in areas with minimal disaster risk. 
"You want to be in areas that allow you to 
have continuity of operation," Boyd says. 
"So you want to avoid places that are very 
vulnerable to hurricanes [or] earthquakes." 

Marin adds, "You're looking to mitigate 
all types of risk, both man-made and non- 
man-made risk. So it could be weather 
risk, or it could be risk relative to inter- 
state highways, rail lines, [or] the flight 
path of a major airport." 

Many enterprises have more than one data 
center — they need a secondary data center 
and possibly also a disaster recovery site. 
Another way to minimize disruption is to 
locate these secondary and backup sites on a 



company headquarters in major metro- 
politan areas. Marin calls this the "serv- 
er hugger" mentality. "The folks at the 
corporation have their data center out- 
sourced, but they still want to be able to 
drive over and see it," he explains. 

Other companies don't care about 
being close to major cities but do want to 
be close to other data centers. "Data cen- 
ters have typically clustered together on 
happenstance," Marin explains. "The first 
guy drove a certain amount of infrastruc- 
ture, and the second guy brought even 
more. By the third or fourth data center 
coming to that market, the infrastructure 
is very robust and those last-in players 
really benefit from that." ill 



different electric grid than the primary site. 
That reduces the chance that both sites will 
suffer a power outage at the same time. 

What's Nearby? 

For a few types of companies and appli- 
cations, latency concerns mean that they 
need their data centers to be physically 
located in a certain area. "The guys that 
focus the most on latency are the traders 
on the exchanges, the financial institu- 
tions," Marin says. "That's why you still 
see significant growth in data centers in 
northern New Jersey or in Chicago next to 
the Mercantile Exchange." 

In addition, some companies want 
their data centers to be located near their 

Data Center Hot Spots 

You can find data centers spread all across the country, but experts point to some areas that are 
particularly popular: 

Central and Eastern Washington: Grant County, Wash., has the lowest-cost power in the country. 
North Carolina: Nuclear power, a temperate climate, and accessibility from major cities on the 
East Coast make this state popular. 

Northern New Jersey: Proximity to New York City makes this area a favorite with financial 
services firms. 

Chicago: Cool weather, network connections, and nearby industry have attracted some big names. 
Texas: Texas boasts low-cost power, a favorable business climate, and a lot of data centers. 
Western New York: Financial firms like this area because it's on a separate grid from New York 
City, but not too far away. 

The Midwest: The center of the country generally offers lower operational costs than either 
of the coasts. 



Recharge Your Change Control Process 



Continued from Page 1 

are incompatible with an existing application, 
says Bryan Rhodes, director of product man- 
agement at Symantec (www.symantec.com). 

"Security teams may be interested in 
changes that may enable a particular secu- 
rity vulnerability to be exploited, such as the 
deployment of software with known vulner- 
abilities or operating system configuration 
changes making the operating environment 
more susceptible," Rhodes says. 

Good Change Control 

Pescatore says a good security change 
control process starts with a baseline of 
security policy and a gap assessment of the 
security controls' current state to determine 
where security controls need to be changed. 
Ultimately, your goal is to reach the level 
necessary to both protect the business and 
meet compliance requirements. 

"A change control process is required 
to evaluate every requested change, assess 
the risk, obtain approval to accept residual 
risks, and document approved changes," 
Pescatore says. 

An organization that is currently relying 
upon an informal, seat-of-the-pants change 
control method can move to a more formal 
method that reduces the risk of accidental 
exposure or data leakage. 

"First, it should determine if the infor- 
mal process is actually working well," 
Pescatore says. If not, it's time to establish 
a baseline and perform a gap analysis. "If 
the process is working well, document it 
and, wherever possible, automate it." 

Rhodes says most enterprises have some 
sort of informal change control process in place 



but recognize the need to implement a more 
formal and structured approach. "Technology 
aside, one of the first steps in accomplishing 
this is to designate a change manager who is 
responsible for reviewing, coordinating, and 
documenting changes," Rhodes says. 

As the process evolves, Rhodes says, 
the change manager can leverage technol- 
ogy such as a CMDB (configuration manage- 
ment database) to have visibility into resource 
associations of equipment scheduled for 
change. "This provides a better understanding 
of upstream and downstream impact and over- 
all risk related to the change," Rhodes says. 

Organizations should also formalize docu- 
mentation around implementation, planning, 
and testing and include a change advisory 
board, Rhodes says. Such a board can be help- 
ful in reviewing and approving changes prior 
to implementation and could be used based on 
the service, size, and complexity of the change. 

At minimum, Rhodes says, most nonstan- 
dard change requests should have an imple- 
mentation plan, a test plan, and a back-out 
plan. "The change should also include infor- 
mation about the service being impacted by 
the change and any dependencies that this 
service has," Rhodes says. 

"Many organizations use workflows that 
send automated email messages to affected 
parties (asset owners, IT security team, etc.) 
at various points throughout the change man- 
agement process," Rhodes says. Such mes- 
sages can be purely informational in nature or 
may require action/input from the recipient. 

When changes are scheduled, Rhodes 
says, it's ideal to inform asset owners of the 
changes that could affect the assets for which 
they are responsible. Those owners then are 



generally given the opportunity to provide 
feedback regarding such changes before 
they are implemented. In some situations, 
the nature of the change could be cause for 
concern, such as a proposed change that is 
incompatible with an existing application. 

"In other cases, the timing of the proposed 
change could be cause for concern due to sys- 
tem availability requirements," Rhodes says. 
If the timing of the change is a cause for con- 
cern, it may be possible to address such con- 
cern by adjusting the schedule of the change. 

Stephen Northcutt, president of the 
SANS Technology Institute, says one of the 
real keys to good change control is using 
technological controls that detect and report 
change. "This gives management a tool to 
hold everyone involved accountable to the 
policy and process," he says. ^ 

Gain Staff Buy-In 

Although many in IT management want to 
emphasize awareness and education in order 
to ensure that IT staff supports good change 
control procedures, Pescatore says there's 
another approach — ^providing an incentive to 
support change control procedures. 

"Make sure change control process compli- 
ance is a measurable part of system administra- 
tors' evaluation criteria. Show metrics of which 
groups or people are doing well or poorly, and 
that will drive awareness," he says. 

Rhodes suggests that one way to demon- 
strate the value of a good change control pro- 
cess is to take a historical view of incidents 
related to change requests. "For example, prior 
to implementing a change control process, 
was their help desk flooded with incidents 
that resulted from the change?," Rhodes says, i 



Then look at the numbers after implementing a 
change control process to see if they improved. 
"There is nothing more powerful than demon- 
strating how a formal change process has con- 
tributed positively to this," he says. 

In addition, it is important to communicate 
regulatory requirements that formal change 
control processes help facilitate, Rhodes says. 

Change control procedures should be con- 
tinually adapted to meet new technological 
challenges. According to Pescatore, new tech- 
nology and extemal services can challenge old 
change control procedures. "Virtualization is 
breaking many old change control processes 
that relied on physical controls of computers 
and servers and security controls," he says. 
"Similarly, outsourcing and use of cloud breaks 
the old ways of change control, as weU." ^ 

Six Configuration 
IVIanagement Tenets 

According to Stephen Northcutt, president of 
SANS Technology Institute, there are six con- 
figuration management tenets used by effective 
IT organizations. 

1 . Focus on hardening systems. 

2. Develop repeatable builds. 

3. Implement change control. 

4. Audit change control with tools that mea- 
sure security. Discipline people if you have 
to, but make change control stick. 

5. Don't waste time troubleshooting; burn bad 
boxes to the ground and reload them. 

6. Re-engineer the frailest boxes first. 
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News 



PHYSICAL INFRASTRUCTURE 



■ Study: Cloud Providers 
Debate Security Responsibility 

According to a study released by the 
Ponemon Institute, 69% of cloud service 
providers in the United States and Europe 
believe it's the customer's responsibility to 
ensure security. In fact, just 25% of those 
surveyed in the United States answered 
"yes" when asked if their organization 
views security as one of their primary 
responsibilities. About 80% devote just 
10% or less of their resources to security, 
yet more than 60% are confident that 
they've met acceptable security require- 
ments. The study also notes that private 
cloud providers tend to focus more on 
security than public cloud providers. 

■ Internet Explorer 8 Leads In Web 
Browser Market Share 

Net Applications' Web browser market 
share statistics show that Microsoft's 
Internet Explorer 8 dominates with 
34.14% of the market, followed 
by Firefox 3.6 in a distant 
second with 16.79%. 
Microsoft's preemi- 
nence continues, 
with the third- 
and fourth- 
largest 
pieces 
of 




the Web browser pie going to Internet 
Explorer 6 (11.14%) and 7 (7.89%), 
respectively. Versions of Google's 
Chrome browser occupy three of the next 
four top slots, with Chrome 10 at 4.34%, 
Chrome 8 at 3.12%, and Chrome 9 at 
2.82%. Apple's Safari 5 has 4.07% of 
the market. 

■ Large Enterprises Primary Adopters 
Of Videoconferencing 

A report from CDW found that 50% of 
businesses have installed telepresence 
technology, and an additional 25% plan 
to install the technology in the next two 
years. The primary reason for the lack of 
telepresence has been the poor salesman- 
ship of the IT department, CDW says, 
because the IT staff attempt to sell a busi- 
ness on expensive collaboration technol- 
ogy without providing any figures on return 
on investment. Because of this, large 
enterprises have been the primary adopt- 
ers of videoconference equipment and 
applications. Most installations are peer- 
to-peer or multisite meeting rooms. 

■ RIM Purchases Mobile Management 
Software Firm 

BlackBerry manufacturer Research in 
Motion has announced its intention to buy 
Ubitexx, German maker of the ubi-Suite 
mobile device management solution. 
Neither company disclosed the terms or 
the timeline of the pending deal. However, 
RIM says it will introduce a new multi- 
platform product, BlackBerry Enterprise 
Solution, partly based on Ubitexx's intel- 
lectual property later this year. BlackBerry 
Enterprise Solution will offer "secure 
device management for Android- and iOS- 
based devices and tablets, all . . . from a 
single Web-based console," RIM says. 
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Maximize UPS 
Availability 

How Reliable Is Your Uninterruptible Power Supply? 



by Brian Hodge 
• • • 

Servers and other components in 

a data center require a steady stream of 
power, and UPSes help guard against the 
damage that can be caused by power out- 
ages, surges, and sags. Maximizing UPS 
availabihty is an important part of any IT 
strategy to protect critical systems. There 
are two core strategies you can adopt to 



Key Points 



Of the four basic UPS designs, which 
is best for you is a factor of business 
requirennents and the reliability of your 
local power connpany. 

UPS redundancy greatly reduces the 
odds of failure innpacting operations. 

Modern UPS designs have significant 
advantages over traditional designs in 
ternns of battery life, reparability, energy 
efficiency, and interconnectivity. 



ensure that your UPS is there when you 
need it: establish system redundancy and 
keep maintenance and repair times as low 
as possible. 

What Kind Of UPS Do You Need? 

UPS designs range from relatively 
simple battery backup to complex, auto- 
mated systems that also "clean" the raw 
power arriving at your facility. Factors 
influencing the best type of design for 
you include the acceptable downtime 
in the event of a power outage and the 
quality and reliability of your local util- 
ity company. 

The white paper "Maximizing UPS 
Availability" from power management 
company Eaton (www.eaton.com) lists 
four basic UPS designs: 

Standby. These kick in only when they 
detect a power outage or other problem. 

Line-interactive. As well as providing 
standby power, these regulate voltages as 
needed, before outputting electricity to 
connected hardware. 

Double-conversion. These totally quar- 
antine equipment from utility power and 
provide even more power conditioning. 
However, they're less energy-efficient 
than standby and line-interactive designs. 

Double-conversion with multimode 
operation. These default to a high-efficiency 
operating mode, toggling over to double- 
conversion mode when power anomalies 
impose a need for increased protection. As 
well, multimode design is usually modular, 
an improvement over traditional designs. 

"Each of these solutions comes with its 
own initial cost, maintenance cost, and 
level of protection," says David Wilson, 
director of IT services at Vector CSP 
(www.vectorcsp.com). "The things I con- 
sider in planning UPS protection are the 
cost of the system vs. the cost of down- 
time, or damage that the lack of such a 
system, or incorporation of a lesser sys- 
tem, will bring." 



A large data center that demands 100% 
uptime will need a system that can ride out 
a total power loss with fail-proof reliabil- 
ity. A smaller business that can tolerate 
some downtime may be fine with a solu- 
tion that merely provides enough stand- 
by power to shut down its servers safely, 
without data loss, until power is restored. 

Redundancy Equals Greater Reliability 

What's true for servers is equally true 
for UPS systems: Redundancy greatly 
reduces the odds of any single failure 
impacting mission-critical operations. 
And, says Wilson, "In the case of high- 
end servers with multiple power supplies, 
it's important to spread those across dif- 
ferent circuits to remove the single point 
of failure." 

Running parallel UPS systems does 
require communication between them. 
This capability is built into some higher- 
end systems. Otherwise, third-party 
hardware is available that can centrally 
manage UPS units. 

Add a parallel battery string. It may 
also be possible to create redundancy for 
a single UPS unit. A battery string, with 
positive and negative terminals connected 
in series, is like a string of old-fashioned 
Christmas lights — if one conks out, the 
whole string could fail. In its white paper, 
Eaton cites one method for safeguarding 
against this: add a second battery string 
running parallel to the first. 

Depending on the unit, this may not be 
a supported modification, so proceed with 
caution. "My concern would be if an IT 
guy did it on his own and it caused a fire, 
there could be legal and liability issues, 
as well as possible arguments from insur- 
ance companies," Mike Oliveri, technol- 
ogy coordinator for a K-12 school district 
in Illinois, says. Thus, unless someone in 
IT has electrical engineering training, get 
someone who does to tackle the job. 

Add a generator as a fallback 
option. Sustained outages can last for 
hours, depleting even the greatest bat- 
tery reserves. If your enterprise can't 
tolerate that kind of downtime, invest 
in a natural gas or other type of emer- 
gency generator to bring online before 
your UPS discharges. 



Upgrade To New UPS Designs 

Newer UPS systems have come a 
long way from the traditional, hulking 
floorstanding designs. They have better 
battery life, operate longer between repairs, 
are more energy efficient, and benefit from 
greater manageability and interconnectivity 
within the IT environment. 

Transformerless designs enable UPS 
systems to be reduced to parallel rack- 
mounted modules. They're not only 
smaller and lighter overall, but also 
user-replaceable, cutting repair times to 
minutes instead of the hours that may 
be required for a service call on a tradi- 
tional unit. 

Flywheel UPS systems eliminate bat- 
teries for power storage. In some cases, 
they're used alongside battery-based 
UPSes, taking over load-leveling duties 
that can shorten battery life. In other 
facilities, flywheel systems have replaced 
battery UPSes altogether, handling brief 
outages on their own and serving as an 
intermediate solution during longer out- 
ages, until a generator comes online. 

Reduce Your Critical Load 

The more you can reduce total power 
consumption, the better it will be for your 
UPS. Even a few simple, low-tech chang- 
es can make a difference. Wilson rec- 
ommends pruning your infrastructure of 
unnecessary components. Don't keep serv- 
ers or other equipment active just because 
they've always been running. If it's fea- 
sible to shut down clients or systems when 
employees are absent — nights, weekends, 
holidays — so much the better. 

As well, if you have inefficient legacy 
equipment hanging around sucking up 
the watts, phase it out in favor of newer, 
less power-hungry replacements — for 
instance, replace any lingering CRT mon- 
itors with LCDs. 

"Keep your electrical footprint as small 
as possible, and regularly review how your 
UPS systems are being utilized to protect 
it," Wilson says. "Put as little strain on 
the system as possible, and be aware of its 
configuration and limitations. The more 
efficient your entire IT infrastructure is, 
the simpler it is to protect it." □ 



Tips For Maximizing Tlie Lifespan 
Of Your UPS Batteries 

Batteries may not play a glory role in the data center, but they have one thing in common with 
servers and other high-end components: They work better when you take care of them. IVIore to 
the point, "If you forget they're there until you need them, they may not be there when you need 
them," warns David Wilson, director of IT services at Vector CSP (www.vectorcsp.com). 

Here are some ways to keep batteries working better and longer. 

• Regularly test their reliability. 

• Regularly check them for degradation using the diagnostic tools provided by 
the manufacturer. 

• Occasionally let their charge run down, then recharge them. 

• Make sure they have well-ventilated air, ideally around 77 degrees Fahrenheit. 

• Don't mix batteries of different resistances or different ages. 
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Wave shaped thermoplastic 
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Split design allows edge cut tiles 
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capturing cables 
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When a "mission critical" 
data room becanne a 
"hot spot" after several 
upgrades. Matt Steding kept his cool. "The extreme 
weather puts an extra load on external compressors 
and condensers — which increases maintenance 
costs." Which is why he chose the more innovative 
cost-effective solution: MovinCoors self-contained, 
ceiling -mounted CM 2 5 air conditioner. 



Lini4cd-HiTi>; olter, Visit 



In addition to MovinCool's reputation for performance 
and reliability, Steding was impressed by the CM25's 
high sensible cooling capacity of 18,900 Btu/h, its 
seasonal energy efficiency ratio (SEER) of 14 and its 
compact dimensions. Sitting just 20 inches high, it 
easily fit into the ceiling space above the data room, 
"The CM25 has all the features we need ~ plus an 
affordable price." 



To read more about Matt's MovinCool success, 
vis^itiwww.movFncooLcom/allina 
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GET THE STORY! 
Scan QRCode^ with 
your smartphone. 
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A Gaw Associates, Inc. Company 
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We are an industry leader, nationally recognized 
for the highest quality 
products and services, mpm wn 

as well as most 
economical solutions. " ^ 






Made in the USA 



Standard & 
Seismic racks 




Numbers speak for 
themselvesi 



Customer satisfaction 97.5% 
On-time delivery 95*3% 
Quality 99.0% 

Source: ISO/TL 9000 Certificarion Data 



Adjustable height tables 
Wall mount racks 



Rack accessories 




• Cable ladders 

• Cable management 

• Custom manufactured 
racks and accessories 

• Design solutions 
and free expert 
consulting 

• Rack and stack 




Technical furniture 



Equipment mounted travel case 



Call us today,, receive answers today: 877-429-7225 
Give us 1% of your business • • • we^ll earn the rest! 
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News 



m Microsoft Antitrust Deal Expires 

Confident that Microsoft has sufficiently met 
its stipulations, the U.S. Department of Jus- 
tice has approved the May 12 expiration of its 
decade-long antitrust oversight of the com- 
pany. As part of the antitrust deal, Microsoft 
was required to allow oversight of its internal 
affairs, to enable computer makers to replace 
the company's software with alternatives 




from third parties, and to license parts of its 
portfolio of patents. In a trial early this month, 
attorneys for the states that originally brought 
the antitrust case against Microsoft told U.S. 
District Court Judge Colleen Kollar-Kotelly 
that they believed Microsoft had satisfacto- 
rily met the requirements set forth and that 
they would not object to letting the oversight 
expire. For its part, Microsoft says it is pleased 
with the decision and looks forward to continu- 
ing in its compliance. 

■ BMC Buys App Performance Vendor 

Coradiant, which specializes in end-user 
experience and Web application perfor- 
mance monitoring, has been acquired by 
BMC Software. No details were released. 
Coradiant's software will be incorporated 
into BMC's systems management soft- 
ware as part of the company's Business 
Service Management platform. BMC says 
the application monitoring capabilities 
opened up by this acquisition will help IT 
pinpoint usability issues with enterprise 
applications, helping worker productivity. 
Companies will also be able to make sure 
their public portals and e-commerce sites 
are running fast and problem-free. BMC 
expects the acquisition of Coradiant will 
help it better compete against other sys- 
tems management vendors. 

■ Government Data Center 
Consolidation Eyed 

A survey by MeriTalk indicates that the fed- 
eral government could save close to $20 bil- 
lion on IT costs yearly by consolidating data 
centers. In addition, the consolidation could 
result in moving many services to cloud 
computing platforms as a further efficiency 
measure. The online study, commissioned 
by storage vendor NetApp, surveyed 152 
government IT decision makers in March to 
determine whether federal agencies have 
made progress toward their goal of closing 
some 800 data centers by 2015. The gov- 
ernment, meanwhile, has released a list of 
39 data centers it has already closed, along 
with a list of another 98 it intends to close by 
the end of this year. 

■ Microsoft Revenue Rises; 
Windows Sales Decline 

Microsoft reported a 31% increase in earnings 
in the third quarter; however, revenue declined 
in the company's Windows division. Microsoft 
posted earnings of $5.2 billion and sales of $1 6.4 
billion during the most recent quarter. For the 
first time in 20 years, Microsoft reported lower 
quarterly profit than its competitor Apple. Industry 
research groups report that PC market sales 
declined between 1 and 3% during the past 
quarter, and consumer sales of Windows fell 8%. 
The overall increase in earnings for Microsoft 
is attributed to its record-breaking Office 201 
suite and its Xbox game system and accessories 
such as the Kinect motion sensor. 



PHYSICAL INFRASTRUCTURE 



FEATURED PRODUCT 



Useful Power 
Consumption Data 

Viridity's EnergyCenter Takes The Guesswork Out Of Power Usage 



by Holly Dolezalek 
• • • 

Viridity, a data center management 

software company located in Burlington, 
Mass., is a new arrival on the data manage- 
ment software scene. 

Founded in 2007 by three veteran soft- 
ware developers. Viridity (www. viridity 
.com) spent three years developing its first 
product at what the company calls "green- 
house" sites for customers that wanted to 
green their operations and were willing to 
beta- test Viridity's product. EnergyCenter 
was released in the first quarter of 2010, and 
Mike Tresh, Viridity's director of product 
marketing and management, believes that its 
success is related to how it was developed in 
the first place. 

"We worked with them to understand 
their problems and figure out how to solve 
them with our software," Tresh says. "We 
built the product with direct customer input 
and didn't just cook it up in a lab, and that 
allowed us to get the important things into 
the product ahead of the first release." 

Key Ingredients 

EnergyCenter is a software application 
that tracks a data center's energy use and 
analyzes its assets for capacity planning, 
utilization, and provisioning of new assets. 
Its main focus is to help users figure out 
how much power the data center is using 
and exactly where that power is going. 
It does so not with the use of sensors or 
smart PDUs or other devices, but with an 
extensive database. 

That database is the most important 
ingredient, Tresh explains, because it takes 
the guesswork out of energy management. 
The database includes energy consump- 
tion information not just for overall assets, 
but for each component in that asset. It 
contains data for the CPU, memory, disk, 
and chassis, for example, for a given serv- 
er so that the picture of the energy usage 
is far more granular than anything a smart 
PDU could give. 

"There are solutions that will tell you 
the whole power supply as it comes in and 
runs to the rack," Tresh says. "But you 
can't tie utilization to that or come up with 
a core measure of work it's doing and the 
power consumption it takes to do it." 

For example, he says, there are many 
different ways to configure a single server. 
If a system is inferring power consump- 
tion from that server but not able to reflect 
how that server is actually configured, it' s 
guesswork — educated, maybe, but still 
guesswork. "If you're guessing at models 
and not looking at specific components, 
you're just not going to be very accurate 
on your calculations, and you'll leave a lot 
of information behind," he says. 

EnergyCenter Features 

EnergyCenter is a standalone software 
product that, once installed, uses its dis- 
covery process to gather information about 
every device on the network and match 
those assets to the information in its data- 
base. Jason Bailey, Viridity's marketing man- 
ager, says that EnergyCenter gets favorable 



reviews because it not only manages energy 
use but also performs DCIM (data center 
infrastructure management) functions. "Users 
can manage not just power and energy but 
also their assets and capacity planning and 
other keynotes of DCIM software," Bailey 
says. "We're hearing that it's doing a good 
job at the base layer of covering the things 
customers need." 

It's also bridging the gap that has tra- 
ditionally existed between facilities and 
IT. Although power bills have historical- 
ly been the province of facilities, with 
no connection to how IT was using the 
power, there has been a move in recent 



consumption and to actually make the data 
center more efficient. In the States, though, 
many customers are still just trying to get an 
understanding of where power is going and 
how it's being used. "In both cases, we have 
customers who are interested in starting to 
charge back power use to individual busi- 
ness units," Bailey explains. 

Tresh says that although U.S. customers 
are interested in finding energy efficien- 
cies, they're more immediately concerned 
with having the resources they need to 
grow the business. "It's more about under- 
standing what you have, capacity plan- 
ning, and knowing that you have resources 




EnergyCenter gives administrators a clear graphical view of average power consumption by asset for 
various systems in the data center. 



years to hold departments responsible for 
the power they consume. 

That move has been more theoreti- 
cal than actual, due to the difficulty of 
breaking out the power bill to reflect 
who is using what. New features in 
EnergyCenter, which are scheduled for 
release later this year, will contribute 
to those breakouts. The ability to break 
down power use by groups of servers or 
to show how much power guests through 
VMware hosting are consuming will make 
EnergyCenter a valuable tool in that move. 
"The software will not only tell you how 
much power you're using, but also enable 
you to track it by business unit and attri- 
bute power usage to individual business 
units better," Bailey says. 

Power Planning & Efficiency 

Viridity's challenges are similar to those 
of many a software maker: how to keep the 
product lightweight while still adding the 
features that customers want. "The feedback 
we get is that we're doing this right, but cus- 
tomers want more," Tresh says. "The ques- 
tion is how to do that the right way." 

The company also has markets that, 
broadly speaking, have slightly different 
priorities where energy use is concerned. 
Viridity didn't target international custom- 
ers right away, but found that the company 
was generating interest in many Canadian 
companies and in the UK and Asia. Many 
of Viridity's Canadian customers are already 
looking to use EnergyCenter to track power 



you need to deploy the services you want 
to deploy," he says. 

Ultimately, the real goal of the software 
is very similar to that: to give users insight 
into how the power their data centers use 
is translated to useful business work. "If 
people don't get a handle on their power 
and IT, they can't tie them back to the 
business," Bailey says. "You have to tie 
power and business usefulness together, 
and only from that starting point can you 
build a truly efficient data center." 01 

Viridity EnergyCenter 



(877) 837-4357 
www.viridity.com 

Description: EnergyCenter uses a data- 
base of asset components and an auto- 
discovery process to show the power usage 
of individual assets and the utilization asso- 
ciated with that usage. 

Interesting Fact: Viridity also offers a free 
software tool called EnergyCheck that gives 
companies actionable power consumption data 
to help understand and resolve power, cooling, 
and space issues in their data centers. 
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DS-RPC Remote Site Management Series 




Device Management 

Console Port Management 

Remote Power Control 

True RMS Voltage/Current 

SNMP Support 

HTTP Power Control 

SSHv2/SSL Secure Access 

RADIUS Authentication 

Direct TCP Port Access 

Telnet/SSH Menu Device Selection 

Device Port Naming 

Individual Port Password Assignment 



BayTech's DS-RPC Remote Management Series provides secure 
and reliable management for your network, servers, and console 
ports. The DS-RPC combines the powerful combination of power 
management and console access. The cost-effective DS-RPC Series 
is meant for single connection applications. Security features 



such as SSH v2, RADIUS authentication, SNMP, and user access 
lists per port allow system administrators to remotely manage the 
DS Series with greater confidence and control. The selected host 
module provides either secure in-band or dial-up out-of-band 
access to your DS-RPC Series remote management solution. 



Bay Technical Assoc. Inc. 5239 A Avenue Long Beach, MS 39560 Tel: 228-563-7334 Fax: 228-563-7335 sales@baytech.net 



PDUs direct 



pdusdirect.com 



Robust, economical power distribution solutions 
shipped within 24hrs - just 4-clicks away! 



of 



COST EFFECTIVE 

Buy at 10-20% below competing sites 



FAST SHIPPING 

Products ship within 24-hcurs 



EASY-TO-USE WEBSITE 

Transactions completed in 4-clicl<s 

INDUSTRIAL GRADE QUALITY 

Highest quality PDUs on the market 



PDUs 



direct 



Tel +1.888.751.7387 
Fax +1.775.284.2065 

www.pdusdired:.com 
sales@pdusdirect.com 



Premium Quality PDUs without the Premium Price 
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Introducing An iStarUSA Exclusive! 

Check out the Chassis Combo Kit Selector at 
www.istarusa.com/comboseiector/chassis.php 

More than 30,000 model numbers in stock, ready for you to choose from! 




Five Brands, One Goal 
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Data Center Flooring & Accessories 



Access Computer Floors 



4' 

▼ CO 



^ACCESS 

comp<ute:r floors, llc 



Access Computer Floors has more than 28 years of 
experience working with raised flooring for high-profile 
clients such as General Electric, the United States 
Postal Service, and Morgan Stanley. The company's 
raised floor system process, including bidding, esti- 
mates, purchasing, and installation, is efficient and 
cost-effective. In addition, the raised floor can be 
adapted for future modifications. 

• Available in wood core, steel, concrete, aluminum, 
and panels 

• Variety of panel options and pedestal systems 

• Laminate finish available in 1/16-inch and 1/8-inch 
thickness 

• Can repair flooring and perform routine flooring 
maintenance 

• Used raised flooring available as an affordable 
alternative 

Best For: Enterprises that want the job done on 
schedule and within budget. 



Access Floor Systems 




AccessFloorSystems.com offers everything you'll need for 
a data center floor, including raised floor panels and com- 
ponents, equipment supports, cable trays, trim materials, 
grommets, ESD carpet and floor, panel lifters, and anti- 
static mats. AccessFloorSystems.com has been around 
for more than 25 years, and it offers same-day shipping on 
most raised floors, components, and accessories. 

• Raised floor systems are available for new and used Tate 
Bare Concore, Woodcore Panels, Tate All Steel Panels, 
Tate Concrete Panels, and Tate Aluminum Panels 

• Replacement panels and components for new and 
legacy data centers 

• Energy-saving solutions for raised floor penetrations 
and blanking panels 

• High-velocity perforated floor tiles and grates to assist 
with cooling issues 

Best For: Enterprises that are building or remodeling the 
data center floor and want a company that offers a large 
selection of products and solutions for legacy data centers. 



ASM Modular Systems Raised 
Access Flooring System 




ASM 

innovations in access flooring 



Raised access flooring systems from ASM allow for easy 
reconfiguration via instant access to wiring and cabling. 
ASM's raised access floors include technology to address 
advances in electronic workflow and energy efficiency. 

• Incorporates a solid brass positive grounding device in 
every panel 

• Uses nickel chrome plating on critical parts for safety 

• Uses a solid tube design that's better than conventional 
U-shape for high-strength stringers 

• Green building elements 

• High-pressure laminates available 

• Vinyl plastic that's resistant to strong chemicals 

Best For: IT administrators who require electrical ground- 
ing and want no zinc whiskers and high-strength stringers. 




Seal raised floor cable openings with the Air-Guard 
Cable Seal product line and realize an immediate cost 
savings in the data center. These products significantly 
minimize air loss and improve static pressure to cool data 
center equipment, which helps prevent expensive electri- 
cal equipment from overheating. Air-Guard is the only 
brushed floor grommet line to offer a dual-stage sealing 
system with the most effective seal in the data center, 
and the only to provide a safety cover for increased safe- 
ty and durability when cables are not going through the 
raised floor cut-out. For the highest-quality products in the 
data center marketplace and the most ease in sourcing 
your sealing solution, rely on PDU Cables. 

• Dual-sealing system provides an effective, economical 
means to eliminate bypass air though cable cut-outs 

• Choose from products with overlapping brushes and/ 
or gasket material to seal your specific cut-out need 

• Flexible and simple cable routing via removal of floor 
tiles without disconnecting equipment 

Best For: The most effective cable opening seal in a 
raised floor data center environment. 

Contact: (866) 631-4238 I www.pducables.com 



Seaico provides a variety of tacky mats to keep your 
computer or clean room free of contaminants. Each 
mat is composed of multiple-layer polyethylene film 
with a specially treated pressure-sensitive adhesive on 
one side, which catches the contaminants from shoes 
or equipment. When sheets gather contaminants, the 
top sheet can be peeled off to expose a new sheet. 
The sheets are designed to resist adhesive transfer, 
preventing sheet-to-sheet de-lamination. Ask about our 
free removable mat holders that allow easy placement 
and removal. 

Variety of sizes and colors 

Keeps contaminants away from computer equipment 
Optional company logo imprint 
Mat sheets individually removable and numbered 
Non-beveled edges ensure each sheet is free 
of contaminants 

Best For: Entry ways into computer rooms or any area 
where dust/dirt can track into the computer room. 



Sealeze CoolBalance 




Data centers are under pressure to be more efficient in 
their cool air usage. Newer equipment is more compact 
and generates more heat than previous generations. 
The CoolBalance brush seal with XtraSeaF"^ technology 
utilizes a thin EPDM membrane that seals the V-gap pro- 
duced when cables penetrate brush filament. The family 
of products includes in-floor and surface mounting as well 
as a circular seal. The CB33 circle seal completely encap- 
sulates the cables, due to the geometry, to offer a very 
effective sealing solution. CoolBalance comes in a variety 
of sizes, from 5x5 inches to 10 x 24 inches, with circular 
seals in nominal 4- and 6-inch sizes and other customized 
solutions to seal around PDUs or inside your cabinets. 

• Seals include in-floor design for new and existing facil- 
ities, surface-mount for odd-shaped or irregular open- 
ings, circle seals for small openings, and wall seals for 
through-the-wall cable passages 

• Sealeze can custom-build sizes at off-the-shelf prices 

• Independent testing has verified the effectiveness of 
CoolBalance in actual installation conditions 

• Backed by 30 years of experience in the industry 

Best For: New or existing facilities looking for brush prod- 
ucts to accommodate a variety of cable cut-out needs. 



Product 



Description 



Product 



Description 



Contact: (800) 787-7325 I www.coolbalance.biz 
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Processofs Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Nathan Lake 



Bergvik Flooring 
Modular Raised Floor 



BERGVIK® 

floors on a higher level 



In the flooring business since 1970, Bergvik offers the 
strongest, most stable and modular raised floor available 
for data centers. Bergvik's engineering department sup- 
plies CAD drawings that are suited to your needs. 

• The Iso Floor system offers custom panels as an 
option to fit your equipment depths and allows for 
optimization to build smaller and smarter rooms; 
floor heights from 12 to 94 inches 

• River Cooling Airflow Panels with high-plume fins 
provide superior air stratification to cool upper servers 
when compared to flat bottom panels; the unique 

36- X 24-foot panel also allows for more server racks 

• Earthquake bracing frames will fit any raised floor and 
are tested to NEBS standards 

Best For: Enterprises that are looking to lower energy 
costs by up to 40% and add more server racks in the 
same footprint, increasing their revenue stream. 



Julie Industries 
StaticSmart Flooring 




Static wBm Smart ' 



STATIC CONTROL FLOORING 



For more than 30 years, Julie Industries has been 
providing static control flooring solutions to companies 
and government facilities throughout the world. The 
StaticSmart line of floor finishes includes ESD carpet 
tile and positile, ESD vinyl, and ESD rubber tile. All 
StaticSmart flooring is appropriate for data centers and 
access floors. StaticSmart offers a lifetime warranty on 
static protection properties. 

• Easy to install 

• Wide selection of styles and colors 

• Low maintenance requirements 

• Permanent static protection without specialized 
footwear 

• Lifetime static protection warranty 

Best For: Data centers and networked environments 
needing fail-safe static control flooring for either access 
floor or non-access floor applications. 



Mainline Connputer 
Access Panel Lifting Tool 




The vacuum created by the double cups on the Access 
Panel Lifting Tool from Mainline Computer allows easy 
lifting of heavy weights: Simply place the Access Panel 
Lifter Tool onto the material and press down to force out 
the air underneath the vacuum cups, which creates a 
powerful vacuum hold. The suction is broken when the 
fingertip-operated bar is lifted. Mainline Computer recom- 
mends one lifter for every 500 square feet. 

• Heavy cast aluminum handle 

• Spring-activated 

• Oil-resistant black nitrile rubber vacuum 

Best For: Removal of raised floor access panels. 



Staticworx Electrically 
Conductive ESD Rubber 

staticworx; 

grounded solutions ^ 



Staticworx produces antistatic floors that are ideal 
for data centers and mission-critical operations. All 
Staticworx flooring comes with a lifetime static-control 
warranty, and Staticworx EC ESD Rubber is unaffected 
by footwear choice, traffic, or environment. 

• Awarded Seal of Approval by ESD Journal as only 
fault-tolerant flooring 

• No wax or polish necessary— damp mop only 

• Installed easily over raised access or concrete floors 

• Can cover entire floor or be purchased as floor mats 

Best For: Data centers that want to ensure flooring pre- 
vents static regardless of footwear worn in the workplace. 



Upsite Technologies KoldLok 
Surface Mount Grommets 




Improper sealing of cable openings in data centers allows 
valuable cold air to escape and contributes to ineffective 
cooling of equipment. The KoldLok Surface Mount Grom- 
met increases current cooling unit capacity, mitigates 
equipment heat loads, and raises static pressure under the 
raised floor to improve cool air delivery through perforated 
tiles or floor grates. KoldLok Surface Mount Grommets 
snap together to seal cable openings in existing computer 
rooms with raised floors to optimize existing cooling equip- 
ment and manage heat loads. They are designed to seal 
a variety of existing raised floor tile cutouts and allow flex- 
ibility of removing tiles without capturing cables. 

• Multiple layers of different-length, opposing-brush 
filaments eliminate up to 98% of bypass airflow 

• Flexibility means admins can re-cable or move tiles 
with ease 

• Will not become dislodged and requires no additional 
maintenance 

• Easy tool-less installation, requires no downtime to 
install or re-cable 

Best For: Sealing cable openings in existing data centers. 

Contact: (888) 982-7800 I www.upsite.com 
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Black Box 

ClimateCabNEMA 12 Cabinets 



Black Box ClimateCab 
NEMA12Wallmount Cabinets 




Black Box's ClimateCab enclosures offer climate- 
controlled protection that lets you install servers 
without the need for additional cooling or costly infra- 
structure. These full-sized cabinets come configured 
for servers or datacom equipment and feature a 
welded 12-gauge steel frame with integral struts. 

• Rated for protection against falling dirt; circulating 
dust, lint, and debris; and dripping or splashing liq- 
uids in indoor environments 

• Full-sized cabinet with 42U of racking space 

• Available with 12-24 or M6 rails 

• Choose from models with 6,000 BTU or 8,500 BTU 
air-conditioning units 

• 40-inch depth accommodates most servers 

Best For: Housing servers in remote locations without 
cooling infrastructure. 

Price: $4,499.95 to $5,499.95 

Contact: (888) 433-5049 I www.blackbox.com 




ClimateCab NEMA 12 Wallmount Cabinets from Black 
Box are the answer when you need to install a small 
amount of rackmount equipment in less-than-ideal condi- 
tions. These secure cabinets provide a compact way to 
protect and cool sensitive components. 

• NEMA 12 rated for protection against falling dirt; 
circulating dust, lint, and debris; and dripping or 
splashing liquids in indoor environments 

• Compact wallmount design saves space 

• Single- or double-hinged 

• Choose from a cabinet with a fan or an 800 BTU 
air-conditioning unit 

Best For: Equipment protection in hot, dirty environ- 
ments such as factory floors. 

Price: $999.95 to $2,795.95 

Contact: (888) 433-5049 I www.blackbox.com 



Data Center Depot CableMax 



i if 




CableMax from Data Center Depot is the premier cabi- 
net for cable and heat management. This cabinet was 
designed to combat the problems caused by the trend of 
components getting smaller while capacity is increasing. 
CableMax employs an abundance of cable pass-through 
holes in the frame for cross cabling and mesh enclosures 
to promote airflow throughout the cabinet. 

• Can use split rear doors to save aisle space 

• Split rail system available so you can have two 
different rail depths 

• Improved Ganging system 

• Features 63% or 80% mesh in doors and top panels 

• Additional adjustable vertical and horizontal cable 
management available 

• Dirak locks and handles on doors and side panels 

Best For: Data centers in need of a cabinet with a 
large number of cable pass-throughs. 

Contact: (877) 429-7225 I www.datacenterdepot.com 




Information 
Support Concepts 
Economy WC Series 
42U Server Rack 
Cabinet 



The Economy WC Series 42U Server 
Rack Cabinet from Information Support Concepts is 
available in both a traditional 42U, 19-inch model with 
36.5-inch usable depth and a Co-Lo version that includes 
four 10U secure client compartments. The WC Series 
cabinets are available with free dock-to-dock shipping 
anywhere in the continental United States. 

• Both units measure 80.91 x 23.62 x 39.37 
inches (HxWxD) 

• 71 % ventilated high-density door 

• Heavy-duty casters and leveling feet 

• Removable side panels 

• Perforated roof and front and rear locking doors 

Best For: Enterprises with deep, hot-running servers 
that need affordable racking. 

Price: $799.95 for traditional 42U version; $1 ,750 for 
Co-Lo version 

Contact: (800) 458-6255 I www.iscdfw.com 



iStar Group i 
ClaytekWSM-960 I 
9U 600mm Depth h 
Rackmount ^ 
Server Cabinet 



With a supported chassis depth of up to 23 inches, the 
rugged, shockmount-style WSM-960 server cabinet from 
iStar Group's Claytek division features a patented anti- 
vibration design with an industrial spring located under 
the cabinet post cage. 

• Gilled side panel air vents 

• Portable handle included 

• Optional front and rear covers and optional casters 

• Universal approach fits most rackmount chassis and 
equipment 

Best For: High-risk and rugged IPC environments. 
Contact: (888) 989-1189 I www.istarusa.com 



Rack Solutions 
55U Open Frame 
Rack 




The 55U Open Frame Rack from 
Rack Solutions provides up to 
30% more space than a typical 
42U model, while consuming 
less square footage. The rack 
optimizes cooling, makes wiring 
easy, and has streamlined sup- 
port for power strips and PDUs. It is compatible with Dell 
HP, IBM, Cisco, and almost everything else. Optional 
accessories include extra vertical cable organizers, side 
panels, tops, a caster kit, power strips, and a baying kit. 

• 3,000-pound capacity 

• 24-inch width makes it perfect for data centers 

• Flush floor mount spreads load on floor tiles 

• Universal square holes with cage nuts included 

• Other sizes available: 24U, 30U, 36U, 44U, 50U 



Best For: Data centers that could benefit from additional 
vertical rack storage space. 



Price: Starts at $499.99 for 55U 



Contact: (888) 903-7225 I www.racksolutions.com/rack 
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Compiled by Blaine Flamig 



Data Center Depot 
Seismic Equipment Cabinet 




The Seismic Equipment Cabinets from Data Center Depot 
are designed to protect valuable equipment in the event 
of an earthquake. A basic 40U cabinet is available, along 
with two 44U cabinets with special features designed 
to protect and manage a large volume of cables, patch 
cords, or fiber cables. This cabinet has an integrated top 
panel with cable pass-through and options such as a 
bend limiter with access hinge and a cable tie-down bar to 
enhance cable management. 

• NEBS Zone 4 tested 

• Top panel with cable cutout for cable pass-through 

• Available with open- or solid-sided frames 

• Cable management available 

• Available in various sizes 

Best For: Data centers that need to protect equipment 
from possible earthquakes. 

Contact: (877) 429-7225 I www.datacenterdepot.com 



Hergo12US-Rack 




This 12U/36-inch enclosure cabinet features a unique 
channel shock-mount assembly for the maximum level of 
equipment protection in seismic-prone environments. 

• Four 11 GA square cage knock-out mounting rails 

• Top fan assembly with four 75cfm fans 

• Locking front and rear doors with knock-outs for 
additional fans 

• Perforated, removable side panels with 12 x 24 filters 

• Options include 24- and 27-inch fixed or slide- 
out shelving, six-port RM power strip, and 1U cable 
loop panel 

Best For: Housing network equipment under conditions 
of shock and vibration. 

Contact: (888) 222-7270 I www.hergo.com 



Hergo ApxServer 

Noise Reduction Enclosure 




Hergo's ApxServer Noise Reduction Enclosures allow 
for mounting of all computers and electronic equipment 
that meets the EIA 19-inch specifications. The enclo- 
sures are 24 x 36 inches and come in either 12U or 26U 
heights. They feature Class A noise reduction foam and 
are Class A fire-rated. 

• Can hold up to 800 pounds (12U model) or 1 ,000 
pounds (26U model) with industrial casters 

• 12U version perfect for under desks 

• Black, quality powder-coat finish; environmentally 
friendly 

• Front and back doors include locks 

Best For: Enterprises that could benefit from re- 
duced noise. 

Price: Starts at $1,195 

Contact: (888) 222-7270 I www.hergo.com 



Rack Solutions 
Wall Mount 
Rack 




Rack Solutions' Open Frame Wall Mount Rack offers 
nine different configurations, making it ideal for almost 
any application. The Wall Mount Rack lets you mount up 
to 21 U of equipment in the front rack space and allows 
for up to 9U of space on the top and bottom of the rack. 
The open design promotes optimal airflow and provides 
easy cable access and tie points. 

• Up to 400-pound capacity 

• Available in 12U, 15U, and 21 U heights 

• Available in 4U, 6U, and 9U depths 

• Optional side panels, top panels, and front covers 

• Assembles in less than 10 minutes 

Best For: Network switches, patch panels, and servers. 

Price: Starts at $199.99 

Contact: (888) 903-7225 
www.racksolutions.com/wall-mount-rack.htm 




Rackmount Solutions 
Air Conditioned 
Server Cabinet 
& Soundproof 
Server Rack 



Rackmount Solutions' Air Conditioned Server 
Cabinets have built-in A/C units with 4K, 7K, 10K, or 20K 
BTUs to protect equipment in warm or dirty environments. 
Units are available from 14 to 48U, with depths from 24 
to 42 inches. Soundproof Server Racks from Rackmount 
Solutions reduce external sound up to 28.5dB while dis- 
persing internal heat loads up to 7kW. Built-in casters make 
it easy to move these servers to another area when the 
need arises. The Soundproof Server Racks are available in 
active and passive versions and in 24U and 42U sizes. 

• Air Conditioned Server Cabinet protects expensive 
equipment from overheating, works like a refrigerator 
with a condensate pan, and can be paired with a rack- 
mount or side-mount A/C for more space 

• Soundproof Server Racks decrease noise up to 
28.7dB(A), which is the equivalent of taking freeway 
noise levels down to library-quiet. Also disperses up to 
7KW of heat. Employees can concentrate better, lead- 
ing to increased productivity and less physical strain 
from excessive noise 

Best For: Data centers and standalone applications with 
heat problems. 

Price: Starts at $5,633 (Air Conditioned Server Rack) 
and $5,249 (Soundproof Server Rack) 



Rackmount 
Solutions Network 
Cable Bundle 
Server Rack 




Need to secure a rack with 
a serious number of cables? Rackmount Solutions' 
Network Cable Bundle Server Rack solves all problems. 
With a roomy interior up to 28 inches, you can set your 
rails to 19 or 23 inches and slide left, right, or center to 
allow for your cabling needs. Rails slide front to back and 
side to side for maximum flexibility. The unit is available 
as an open rack or with doors, side panels, and tops for 
security/aesthetics. 

• Compatible with all leading servers, including 
blade servers 

• Allows up to 10 inches of cabling space between side 
panel and rail 

• Use as an open rack or add security with locking side 
panels and doors 

Best For: Data centers and standalone applications 
needing to integrate quantities of cable drops. 

Price: Starts at $1,115 

Contact: (866) 207-6631 I www.rackmountsolutions.net 



Contact: (866) 207-6631 I www.rackmountsolutions.net 
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News 



Memory Loss Linked 
To Multitasking 

A study published by the Proceedings of the 
National Academy of Sciences, or PNAS, 
linked multitasking to memory loss in older 
adults. The study revealed older adults (ages 
60 to 80) are more affected by interruptions 
than younger adults (those in their 20s and 
30s), meaning that when performing tasks 
simultaneously, older adults have trouble 
returning to an original task when interrupted. 
According to the study, the researchers used 
functional MRI to "investigate the neural basis 
by which an interruption is more disruptive to 
working memory performance in older individ- 
uals," which essentially means following pat- 
terns in brain activity using an MRI scanner. 

Adam Gazzaley, a cognitive neuroscientist at 
the University of California at San Francisco 
and co-author of the study, explained the 
method for testing such memory functions. The 
tests are short-term memory assessments in 
which participants would see a natural scene. 





and after a short while, the scene would be 
interrupted by a different, unrelated image of 
a person's face, Gazzaley says. Participants 
were then asked questions about the interrupt- 
ing image, such as to make a gender or age 
decision about what they saw. When asked to 
recall the previous scene, the younger adult 
participants were able to recall the first images 
while older adults struggled. 

Interruptions Affect Efficiency 

"Memory performance drops and gets worse 
for older adults," Gazzaley says. "There 
was a significant difference." The main goal 
of the study, according to Gazzaley, was 
to determine why there was a difference in 
short-term memory functions between older 
and younger generations. 

"One of the things we were considering is that 
older adults were focusing more attention on 
the disruption . . . that doesn't seem to be the 
case," Gazzaley says. Curiously, both age 
groups paid an equal amount of attention to 
either of the images or scenes, yet the young- 
er generation was more easily able to recall 
the previous occurrence. "There seems to be 
a networking interruption," Gazzaley says. 
"This gives us insight into what multitasking 
is doing to our memory as we get older." The 
study refers to this as a "deficient ability to 
dynamically switch between functional brain 
networks" or an "interruption recovery failure." 

Gazzaley says that you can use this infor- 
mation to guide your behavior in a more 
efficient way. "If you are doing something 
time-sensitive, limit your interruptions," he 
says. For example, Gazzaley says he limits 
interruptions by turning off his email service, 
closing the door, or silencing his cell phone. 
"This research shows the mechanisms of 
why this is happening, but with this study and 
others, it shows that your efficiency is down- 
graded while multitasking," he concludes. 

by Antona Beckman 
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SIX QUICK TIPS 



Controlling Airflow 
In The Data Center 

Save Energy & Protect Equipment By Correctly Managing Airflow 



by Sixto Ortiz Jr. 
• • • 

Managing equipment temperature 

is a critical function in today's data center. 
Increasing processing power, combined 
with shrinking form factors and rising 
equipment densities, means temperature 
management is more important than ever. 
And the only effective way to achieve 
temperature management — besides turn- 
ing off or eliminating equipment — is to 
control airflow. When done effectively, 
controlling airflow and managing heat 
results in less downtime and longer equip- 
ment lifespans, conditions that every data 
center administrator wants to achieve. 
Administrators should be sure to explore 
all of the options available to them for 
proper airflow control, from the simplest 
to the most sophisticated. 

Segregate Hot & Cold Air 

CRAHs (computer room air handlers) 
work most efficiently when fed the hot- 
test air possible, says Edward Henigin, 
CTO at Data Foundry (www.datafoundry 
.com). So, "pre-cooling" hot air by mixing 
it with cold air can actually cause a CRAH 
to operate less efficiently. And conversely, 
he adds, hot and cold air mixing results in 
a "pre-heating" effect that wastes energy 
and may cause server air temperature lim- 
its to be exceeded. 

In fact, Henigin says, the most impor- 
tant thing administrators can do in a data 
center is keep hot and cold air separate. 

Mike Raber, sales manager at Instor 
Solutions (www.instor.com), says all serv- 
er enclosures should be configured into a 
hot aisle/cold aisle alignment: Server racks 
should be arranged in alternating rows, 
with cold air intakes facing one aisle and 
hot air exhausts facing the other. This, he 
adds, eliminates the transfer of hot exhaust 
air from one system into the intake air of 
another system. 

Carl Cottuli, vice president of prod- 
uct development at Eaton Wright Line 
(www.eaton.com), says administrators 
should use products that separate cool 
from hot air streams. For example, he 
adds, hot aisle containment systems 
in passive or assisted exhaust system 
configurations are useful for hot aisle 
containment. Rack-based chimney 
containment uses a chimney structure 
mounted to the top rear of the IT equip- 
ment rack to capture exhaust heat and 
redirect it to the CRAC (computer room 
air conditioning) units. 



Practice The Three 'IVI's: 
IVIonitor, IVIonitor, IVIonitor 

As the old adage goes, "You can't 
manage what you can't measure." In 
order to effectively control airflow, data 
center administrators must have a pretty 
good idea of the baseline conditions in 
the data center. 

External airflow probes that measure 
the airspeed entering and leaving a rack 
are effective at detecting when filters are 
clogged, airways are obstructed, or if fans 
have either failed or are about to do so, 
says Mo Sheikh, marketing programs man- 
ager with ITWatchdogs (www.itwatchdogs 
.com). Sheikh recommends monitoring sys- 
tems that graph measurements over time, so 
any trends can be captured. 

Data center personnel should consider 
establishing a network of sensitive tem- 
perature sensors throughout a data center, 
says Christopher Davis, senior director 
for marketing communications at NTT 
America (www.us.ntt.com). These sen- 
sors, he adds, should be connected to a 
management system that monitors tem- 
peratures in real time. These management 
systems use sensor data to increase cool- 
ing during peak times and reduce cooling 
during low utilization hours, thus maxi- 
mizing efficiency, Davis says. 

Eaton Wright Line's Cottuli says there 
are four key temperatures data center per- 
sonnel must monitor: inlet air temperature 
to the equipment in the rack, exhaust air 
temperature coming out of the rack, cool- 
ing equipment (CRAC) outlet tempera- 
ture, and return air temperature back to 
the CRAC. 

Utilize Outside Air 

Energy savings and airflow control can 
go hand in hand. For example, engineers 
John Pappas and Ron Wilson at Mazzetti 
Nash Lipsey Burch (M+NLB; www.maz 
zetti.com) recommend the use of air- side 
economizers that take advantage of out- 
side air to cool the data center. This tech- 
nology, they add, can deliver 60 to 70% 
reductions in energy expenses without 
compromising the delivery of cool air into 
the data center. 

Pappas and Wilson also point out that 
most data centers run at temperatures 
much cooler than necessary. Recent tests 
by Intel, they add, have shown that servers 
can tolerate much higher temperatures and 
even humidity. So, if good airflow man- 
agement and little cold and hot air mixing 



BONUS TIPS 



■ Assign responsibility. 

Carl Cottuli, vice president 
of product development at 
Eaton Wright Line (www 
.eaton.com), recommends 
dedicating responsibility for 
airflow improvement to a 
single individual (an "airflow 



management czar"). This 
emphasizes organizational 
commitment to the task. 

■ Get rid of old equipment. 

Retire aging servers that are 
no longer needed, especially 
those that have no processing 



load but are still consuming 
energy. Fewer servers means 
less energy consumption, 
less heat dissipation, and less 
air movement to have to con- 
trol to keep the overall data 
center at the correct tempera- 
ture balance. 



Best Tip: 

Strategically Place 
Thermostats 

Administrators should ensure proper place- 
ment of thermostats throughout the data cen- 
ter, says Darren Bonawitz, principal at 11 02 
GRAND (1 102grand.com). If any thermostats 
are located in the CRAC return air stream, 
they should be relocated to the supply air 
stream, he says. This ensures more uniform 
server inlet and under-floor temperatures. 

Most Practical Tip: 

Reduce Energy 
Consumption 

Christopher Davis, senior director for market- 
ing communications at NTT America (www 
.us.ntt.com), points to various energy effi- 
ciency measures that can decrease power 
consumption and heat generation in the 
data center, reducing demands on airflow 
management. For example, he adds, using 
EPA Energy Star-certified servers can lead 
to, on average, 30% reductions in energy 
consumption. Using energy-efficient lighting 
and automated lighting controls, he adds, 
can also save energy and reduce heat in the 
data center. 



are occurring in the data center, adminis- 
trators can keep temperatures warmer and 
capture energy savings. 

Address Obstructions & Holes 

When considering ways to man- 
age airflow, it's easy to miss the obvi- 
ous. Simple things such as openings or 
obstructions can divert air and channel it 
in unwanted directions. 

Cabling is absolutely necessary in the 
data center, but it can also be a key cul- 
prit in the creation of unwanted obstruc- 
tions. For example, Cottuli says, cable 
entry points that are improperly sealed can 
result in unintended air leakage. Closing 
the gaps around cable bundles and cable 
pass-through points will eliminate these 
unwanted leakages. 

In raised-floor environments, any access 
holes or openings should be blocked using 
products such as brush grommets or pil- 
lows, says Instor Solutions' Raber. This 
helps maintain subfloor static pressure and 
prevents cold air leaks originating beneath 
the raised floor, he adds. This simple reso- 
lution, Raber says, is one of the most cost- 
effective ways to lower a data center's 
monthly energy bills. 

Open rack units in enclosures are an 
obvious way to create unwanted openings 
through which air can flow out. Blanking 
panels, Raber adds, are another low-cost 
solution for easily blocking open rack 
units in an enclosure and preventing hot 
and cold air from mixing. 
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SIX QUICK TIPS 



Improving Application 
Performance Monitoring 

Reduce Latency & Understand Your Network To Keep Users Productive 



by Chris A. MacKinnon 

Many network managers have scram- 
bled to find the issues behind an application's 
slow performance. One end user notices it 
and makes a call, and suddenly hundreds of 
users are frustrated because it's taking them 
exponentially longer to access and use their 
application(s). For this reason, the ability to 
monitor application performance is para- 
mount, and improving this ability has saved 
many a bewildered network manager from 
the perils of heated end users. 

Consider Latency Across The Board 

Latency can be a big problem for appli- 
cations and can happen virtually anywhere 
in the data center. But Zohar Gilad, execu- 
tive vice president of products, market- 
ing, and channels for Precise (www.precise 
.com), says most application latency resides 
in data storage systems. "However, while 
many problems look like a storage issue 
(since applications spend so much time 
there), the root cause is more often than 
not the application code," Gilad says. "To 
resolve, IT must find the SQL that is the 
root cause of the I/O and tune it." 

To fine-tune things, Owen Garrett, chief 
innovation officer at Zeus Technology (www 
.zeus.com), says it's important to baseline 
your key end-user metrics. "It's important to 
consider the SLAs [service-level agreements] 
you must meet (for example: response time, 
latency, and error rate)," Garrett says. "It's 
just as important to baseline your key applica- 
tion metrics. Ask yourself: What are the key 
intemal metrics I can manage and change by 
scaling my infrastructure (metrics including 
message backlog and CPU utilization)?" 

Latency can also cause issues with Web 
applications. Jon Lin, director of innovation 
with Equinix (www.equinix.com), says when 
considering site speed, look beyond actions 
on the page such as script requests and image 
renders, and also analyze two additional 
elements: network latency and bandwidth 
between your end users and your site. "When 
latency is reduced it will have a tremendous 
effect on page load times, even more so than 
bandwidth, with every 20ms of reduced 



latency resulting in a 7 to 15% decrease in 
page load times," Lin adds. He says in the 
end, the interplay of these variables will con- 
tribute significantly to site performance. 

Lin says Web site availability is not sole- 
ly dependent on how well you operate and 
create your site's infrastructure; it is also 
affected by the performance of your Intemet 
service provider and other service providers. 
"Optimizing extemal sources such as Intemet 
performance, data center uptime, and local 
traffic will help a site structurally compete 



Best Tip: 

Continuously Monitor 
The Network 

Your application perfornnance nnonitoring 
solution shouldn't be dusted off only for trou- 
bleshooting, according to Stephen Brown, 
product nnarketing nnanager for Network 
Instrunnents (www.networkinstrunnents.conn). 
"Daily monitoring ensures staff stays on 
top of performance issues and can identify 
them before they impact users," he says. 
"Implementing technology like long-term 
packet capture appliances can help to iden- 
tify sporadic application issues, so you don't 
have to wait for them to occur again." 

Most Obvious Tip: 

Understand Normal 
Application Behavior 

It sounds obvious, but performance is 
relative. Brown says. "Without understand- 
ing normal application behavior in your 
environment, it's difficult to identify bad 
performance," he says. "Benchmark and 
baseline performance not only for the 
application but also for the underlying 
infrastructure and network that supports 
the application. Through benchmarks and 
baselining, you can better configure alarms 
on your monitoring tools to alert you to 
degraded performance." 



with the likes of online powerhouses like 
Google and Amazon," he notes. 

Avoid Black Holes 

Stephen Brown, product marketing 
manager for Network Instruments (www 
.networkinstruments.com), says as your 
organization virtualizes its infrastructure, 
be sure to maintain visibility into appli- 
cation communications in virtual envi- 
ronments. "The method for eliminating 
potential black holes on your network will 
depend on your infrastructure and budget," 
he says. "You could utilize a software ana- 
lyzer within the hypervisor, implement [a] 
switch, or deploy a virtual tap to export 
data to physical monitoring devices." 

And because virtualization is an ele- 
ment of cloud computing. Brown also says 
network and application teams need to 
be aware when migrating services to the 
cloud, because it won't decrease the work- 
load. "When performance problems involve 
cloud services, it's up to you to prove that 
the service vendor and not your network 
is the culprit," he says. "Multiple-segment 
(multi-hop) analysis and investigating 
HTTP error codes can locate the cause of 
cloud service issues and produce proof that 
can be shared with the cloud provider. For 
example, 5xx errors would point to the ven- 
dor' s servers as the likely issue." 

Know Your Topology 
& Infrastructure Location 

Equinix's Lin says if you don't fully 
understand your network, you'll be slow 
to identify problem areas. When testing 
application performance, Lin points out 
three key parameters you should always 
analyze: round-trip time, or the time it takes 
to establish an initial connection to a server; 
traceroute, or how many network hops exist 
between the last-mile node and the beacon 
server; and availability data from all global 
locations. "Understanding your network 
topology can help you quickly identify 
potential trouble spots," he says. 

Lin also says it's important to create a 
global infrastructure. "When dissect- 
ing performance, it should be noted that 



BONUS TIPS 



■ Don't miss out on the right data. When 
you can monitor almost anything, the temp- 
tation is to monitor everything that's easy, 
says Owen Garrett, chief innovation officer 
at Zeus Technology (www.zeus.com). Don't 
miss the key data, which is often the hardest 
to capture. 

■ It's not just the application; it's the con- 
nectivity and the client, as well. Application 
performance and delivery that may be accept- 
able for a fixed-line user may be unacceptable 
for a mobile one, Garrett says. 

infrastructure location plays a huge role in 
how well a site or application performs," 
he explains. "Placing your infrastructure 
in data centers that are close to the critical 
network paths of the Internet will signifi- 
cantly reduce latency by providing access 
to optimal routes to end users. Leveraging 
data center services and robust ecosystems 
provides global infrastructure for Web sites 
and helps them increase site performance 
and availability without having to redo or 
revamp any software or hardware." 

Prioritize Your Numbers & Workloads 

In Gilad' s opinion, those who moni- 
tor application performance should start 
with the business priorities, not the tech- 
nical metrics. "Don't spend time tun- 
ing things like slow SQL statements 
that are only for low-priority work," he 
explains. "Instead, data center and IT 
managers should collaborate with the busi- 
ness managers to identify which workloads 
are important, and start there." 

Gilad says it's also important to "know 
your normal" and keep baselines of all 
activity and store the history where you 
can retrieve it easily. "These detailed 
baselines and histories can be used to 
quickly identify what changed whenever 
you have any application performance 
problems," he notes. "Having this histori- 
cal context can be the difference between 
solving a problem in minutes vs. solving 
them in days." 

According to Zeus' Garrett, understand- 
ing which numbers matter makes a differ- 
ence in the long run. "It's very important 
to know the numbers that impact applica- 
tion performance, which numbers are indi- 
cators of problems (but not problems in 
their own right), and which numbers have 
no correlation at all," he says. "Learn how 
to baseline and correlate the first two sets 
of numbers, not only to detect when prob- 
lems occur, but to learn the warning signs 
that a problem is imminent." 



Physical Infrastructure 




Sentry Power Manager (SPM) 

SPM is a 1 U appliance and software package capable of 
monitoring and managing multiple PDUs in IP-based 
enterprise networks. 

• Global view of power • Group outlets or branches 

• Temperature monitoring • Database to store 

• Trending, graphing, and reporting information 

• Manage outlets globally • Auto-discover PDUs 
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CS-6HD/HY 50/60A 3Ph 6xL6-30R 

Introducing the unique 50/60A three-phase Smart CDU 
designed especially for Cisco Nexus 7000s. 

• A NEMA locking outlet solution for high-density applications 

• Reliable three-phase power distribution 

• Local and remote power monitoring and environmental 
monitoring via IP 

• Link to an expansion unit for more outlet 
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Per-Outlet-Power-Sensing (POPS) CDU 




Power Information 




Per Outlet Includes: 




• Current load (A) 




• Voltage (V) 




• Power (kW) 




• Apparent power (VA) 




• Crest factor 




• Power factor 




This information can be used to 




calculate the PUE and DCiE from 




The Green Grid, which in turn 




will allow data center managers 




to make informed intelligent 




decisions about their facilities. 
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News 



Computer Science 
Enrollments Up 

After many years of declining or liolding 
steady, enrollment in computer science 
programs nationwide is trending upward, 
according to a recent study. The CRA 
(Computer Research Association), a group 
of researchers, academics, and profes- 
sional society members, has been keep- 
ing track of facts and figures regarding 
IT employment for 40 years. The group's 
annual Taulbee Survey documents trends 
in enrollment, degree production, employ- 
ment, and faculty salaries in Ph.D. -granting 
departments of CS (computer science), CE 
(computer engineering), and Information 
(including information science, information 
systems, information technology, and infor- 
matics) in North America. 

Back From The Brink 

This year's report surveyed 265 Ph.D.- 
granting institutions. Results showed total 
enrollment in U.S. computer science pro- 
grams increasing 10%. This was the third 
straight year of improvement, signaling an 
end to the sharp decline that followed the 
dot-com boom and bust of 10 years ago. 
At its height in 2001 , enrollment stood at 
400 students per department; by 2007, 
it was below 200. The report shows that 
those numbers are going back up, with 
current enrollments averaging 253 stu- 
dents per department. 

"I think the current increase is an acknowl- 
edgement that computing seems positioned 
at the hub of just about every national 
priority," says Peter Harsha, 
director of government 
affairs for CRA. "I think stu- 
dents have realized that 
if they want to work 
in science, health 




care, national security, finance, and on and 
on, a computing degree can be the ticket." 
The decline in enrollment after the dot-com 
bust, he feels, was due to doubts about 
finding a job in IT in that economic climate. 
Times have changed, he says, and students 
again see opportunity in the computing field. 

Overall, the number of bachelor's degrees for 
all three categories in 201 rose close to 1 1 % 
over 2009; the number of bachelor's degrees 
in computer science departments alone was 
up over 9%. The number of women in each 
of the IT disciplines saw modest increases, 
although their portions of each segment are 
still small: Women accounted for 13.8% of 
bachelor's degrees in CS, 10.4% in CE, and 
14.5% in Information. 

Master's degree numbers in CS saw the 
least change from 2009 to 2010, remaining 
relatively constant; CE department num- 
bers went down, but Information numbers 
went up. Ph.D. production in computing 
programs from 2009 to 2010 held steady, 
which was a welcome change from a drop 
the previous year. In the end, despite chal- 
lenging economic times, academic com- 
puting programs seem to have held their 
own from 2009 to 2010. Undergraduate 
enrollments increased, while graduate and 
doctoral enrollments held steady. 

by Patrick Kean 
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The All-In-One Network 

Convergence Reduces Costs & Increases The Importance Of Service Quality 



by Julie Knudson 
• • • 

The network infrastructures sup- 
porting voice, video, and data have histori- 
cally been entirely separate entities, each 
using its own cabling and hardware, along 
with highly specialized monitoring and man- 
agement tools. But many organizations are 
beginning to focus on the commonalities of 
these networks rather than their differenc- 
es. The result is a holistic architecture that 
shares resources to more efficiently support 
users' growing technology needs. 

Cameron Niles, principal and CTO at 
Syzygy 3 (www.syzygy3.com), sees a cou- 
ple of primary forces behind the increasing 
popularity of converged networks. "I would 
say that VoIP and video are probably the 
two applications that are driving convergence 
most aggressively," Niles says. Once an 
enterprise decides to implement either a voice 
or a video solution, the idea of convergence 
becomes more organic. "It inevitably leads 
back to re-evaluating networking require- 
ments [and] the existing network infrastruc- 
ture and finally asking, 'Doesn't it just make 
sense to create a converged network and 
upgrade everything at the same time?'" 

For data centers considering conver- 
gence, the upside extends beyond simpli- 
fying the upgrade process. "Once the IT 
team becomes familiar with the equipment 
and technologies, the benefits are worth the 
effort," says Dave Martin, vice president of 
marketing at Edgewater Networks (www 
.edgewaternetworks.com). "If implemented 
properly, converged networks will actually 
reduce the workload for IT, save money, 
and help accomplish the business objec- 
tives of the organization." 

Maximize The Infrastructure 

Data centers leveraging converged net- 
works gain a primary advantage in IT sav- 
ings through infrastructure consolidation and 
simplification. "Running voice, video, and 
data on a common network reduces ongoing 
operational costs and the different types of 
wiring, equipment, and expertise that would 



Why Companies 
Resist Convergence 

Enterprises cite a number of reasons to main- 
tain separate networks. Here is a look at a few 
of tine most common concerns. 

• Cost. IVIany legacy voice switches are 
still going strong, so the forklift upgrade 
looks expensive and unnecessary. 

• Lack of familiarity. Very data-centric 
IT groups may not have had experience 
managing voice or video as an applica- 
tion on the network. 

• Performance issues. Mission-critical appli- 
cations, or those that need to run within 
very tight tolerances, aren't always good 
candidates for convergence. 

• Security concerns. Networks that are 
HIPAA-compliant or that must keep 
video or voice open to third parties lend 
themselves to separation. 



be required if these applications were each 
running on a dedicated infrastructure," says 
Keith Morris, vice president of marketing at 
Talari Networks (www.talari.com). 

Implementing a well-designed holis- 
tic network also improves productivity and 
eliminates many of the inefficiencies found 
in the traditional multinetwork architecture. 
"Savings are realized by simplifying admin- 
istration and reducing the number of network 
connections, service contracts, and vendor 
interfaces," Martin says. "Converged net- 
works also enable companies to take advan- 
tage of IP-based communications services 
such as SIP trunking or business-to-business 
videoconferencing that increase productivity 
and reduce expenses." 

Focus On Design 

Make no mistake — successfully converg- 
ing disparate networks requires time on the 
front end to design an infrastructure that 
makes things happen in the right way. "If 
converged networks are not designed cor- 
rectly and implemented using equipment that 
ensures the secure and reliable delivery of 
IP-based communications, then the benefits 



Key Points 



Hardware and cabling consolidation 
reduces infrastructure costs. 

Prioritize the user experience when 
managing network traffic. 

Convergence success relies on skillful 
network design and implementation. 



its own dedicated network to a converged 
network, employees expect the same user 
experience," Morris says, pointing to voice 
services as a prime example. "People are 
used to very high availability and excel- 
lent call quality. This is challenging on an 
IP network where voice must compete with 
other applications." 

Managing that competition and address- 
ing the underlying causes of QoS issues 
(many of which may not have existed when 
the networks were separate) are critical to 
ensuring a good user experience. "Video 
and voice are fundamentally different than 
data, in that they are very susceptible to 



"If implemented properly, converged 
networks will actually reduce the 
workload for IT, save money, and help 
accomplish the business objectives of 
the organization." 

- Edgewater Networks' Dave Martin 



of convergence will not be realized," Martin 
says. "Applications will not work well and 
the network will be expensive to maintain." 

"In a VoIP system, it is possible to set 
up a call even when the network is busy," 
Morris says. This scenario often leads to 
poor voice call quality, a problem that can be 
avoided with proper network design. "The 
network needs to be designed with enough 
capacity and properly configured quality of 
service (QoS) so that time-sensitive packets 
like VoIP can always make it to the destina- 
tion in time." 

Traffic Control 

Maintaining the service quality that users 
have come to expect from separate high- 
performance network environments depends 
heavily on controlling how voice, data, and 
video traffic moves across the network. "Due 
to the stringent requirements around packet 
loss, jitter, and latency required for IP-based 
communications, it is very important to pri- 
oritize this traffic over other data traffic," 
Martin says. "Successful designs consider the 
required bandwidth to run all applications . . . 
and the interoperability of all devices." 

Users coming from separate voice, video, 
and data networks bring with them an expec- 
tation of superb voice and video quality. In 
order to meet those high expectations, data 
center teams must be ready to prioritize the 
user experience, especially as it relates to 
voice and video, over most other consider- 
ations. "When an application is moved from 



quality issues from things that cause data 
no issues whatsoever," Niles says. "But 
when you add video and voice to that same 
network, if there are inherent bottlenecks or 
issues that interject any kind of latency or 
jitter, what you get is an immediately bad 
experience on the voice or video." 

Holistic Monitoring 

Converged networks require monitoring 
tools and practices that are able to iden- 
tify congestion points and early-stage QoS 
concerns. Niles recommends that IT man- 
agers look for "feature sets that specifical- 
ly address monitoring VoIP and/or video 
across the network. It starts to become really 
critical to stop looking at things that are 
Layer 2 or Layer 3 events," he explains, 
adding "that stuff is important, but you need 
to start employing tools that are application- 
aware and that can actually test what a typi- 
cal user's experience is on a voice call across 
that network backbone." 

Good monitoring and management will 
contribute significantly to IT's ability to 
deliver the high QoS that users expect. 
"Companies successfully operating con- 
verged networks have implemented a solu- 
tion that connects, protects, optimizes, and 
monitors their IP-based communications 
and devices," Martin says. "Identifying 
real-time traffic that will require special 
handling and developing a QoS plan with 
a particular focus on managing bandwidth 
on access links are good first steps." 
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Making IT Services Mac-Friendly 



Be Prepared For Apple's Increasing Presence In The Enterprise 



by Carmi Levy 
• • • 

Early last decade, when market share 
for Apple's Macintosh computers hovered 
around 2% and speculation around the 
company's very survival was rampant, IT 
could be forgiven for assuming it would 
never be buying or supporting significant 
numbers of Macs. 

What a difference a decade makes. With 
Apple's PC market share now above 10% 
and iOS -powered iPhones, iPads, and even 
iPod touches becoming must-haves for 
consumers, the tables have turned. Those 
same consumers who buy Apple products 
on weekends tend to bring them to work, 
and when they do, they expect at least 
some support from IT. Increasing con- 
vergence between Mac OS X and iOS — 



Key Points 



Get ahead of the Mac dennand curve 
by studying the hardware and software 
and being ready for ennployees who ask 
for it. 

Tweak your budget to allocate sufficient 
resources to cover nnulti-OS environ- 
nnents. New nnanagennent tools, training, 
developnnent, and infrastructure needs 
will add to the bottonn line. 

Mac-friendly doesn't nnean Mac-supported, 
so adjust your user policies and don't 
be afraid to assign reduced coverage to 
alternative-platfornn clients. Adaptable 
SLAs and acceptable use agreennents 
can establish clear expectations early on. 



the next version of OS X, vlO.7 Lion, is 
expected to closely mimic the iOS look 
and feel and will sport greater code-based 
commonality — makes enterprise Mac 
integration, however limited in eventual 
scope, an easier sell. 

Although 10% market share is far from 
dominant, and IT won't likely be ditching 
Windows anytime soon, it needs to pay 
attention all the same. The steadily grow- 
ing parade of Apple-branded products into 
executive and employee offices via sanc- 
tioned or unsanctioned means is putting 
growing pressure on IT to make life a little 
easier for Macs. 

Steve Groves, CIO of GoodLife Fitness, 
Canada's largest chain of fitness clubs, 
says IT can look at Mac implementation 
from two perspectives: the front door and 
the back door. 

"Through the front door, we're bring- 
ing them in, experimenting with them, 
figuring out how the operations team 
manages them and how the support 
team can best support them, and we're 
also examining the operating system 
as a possible platform for develop- 
ment," he says. "We also recognize that 
a lot of people are bringing in their own 
Apple devices through the back door to 
access corporate resources, and there's 
not really a heck of a lot we can do 
about it anyway." 

Expect Software & Hardware Costs 

Whatever perspective IT takes, Good- 
Life Fitness has run into a couple of 
speed bumps along the way. "We didn't 



really have an overwhelming demand to 
upgrade our existing Exchange Servers to 
2007," he says, "but to really take advan- 
tage of some of the capabilities of the 
Mac, you need Exchange 2007, otherwise 
you're not using it to its potential." 

Client-side investments also fig- 
ure into any Mac-friendly IT initiatives. 
"We've got a number of Web applica- 
tions that won't work on anything other 
than Internet Explorer 7 or above," Groves 
says. "You can hack your way through 
and try to trick the browser, but you still 
won't get the same experience." 

The answer. Groves says, is using vir- 
tualization software to support Windows 
and its browser. However, the downside 
to virtualization is its hunger for mem- 
ory. "We've upgraded some MacBooks 
from 4GB to 8GB of RAM just to run 
virtualization," Groves says, adding that 
the expense worries him in case more 
users expect similar treatment. "It's 
largely an unnecessary expense that I 
wouldn't consider if I was deploying to 
700 or 800 users." 

Costs can extend beyond hardware, as 
well. "Anytime you add a new operat- 
ing system, there's an incremental cost in 
terms of the IT group's ability to support 
it. We have to train our helpdesk staff, our 
QA resources, and potentially our devel- 
opers," Groves says. 

"Most of the administrative and sup- 
port tools just aren't available in the 
new environment, either," he contin- 
ues. "It's one thing when you're in 
an office and the tech support team is 
right upstairs. [It's] quite another when 
you've got 8,000 employees across 
the country and we're used to using 
remote desktop support centrally. It 
adds another layer." 

Manage Application Expectations 

Adjusting service-level agreements 
and communicating the outcomes to 
Mac-using end users can keep IT's 
effort level in check when deciding how 
thoroughly the new platform should be 
supported. This approach also sets more 
realistic expectations. To roll back the 
complexity and level the playing field. 
Jack Gold, founder and principal ana- 
lyst at J. Gold Associates, recommends 
platform-agnostic strategies. 

"The easiest way to do this is to make 
everything browser-centric," Gold says. 
"That way, the Mac user can access 
almost everything, though they can't oper- 
ate with the data on their own system." 

Gold says a number of file-sharing prod- 
ucts can make a Mac look like a support- 
ed Windows platform. Application-level 
compatibility has gotten better, but it' s far 
from perfect. 

"Of course, you can get Microsoft 
Office for a Mac, so that part is cov- 
ered," he says. "But there are very few 
other corporate apps that have Mac cli- 
ents, so the Mac folks are generally out 
of luck." 

Gold says the Mac's relatively small 
market share makes it difficult for most 
organizations to cost-justify porting all 
of their apps over, so "IT needs to make 
it clear that if you bring a Mac to work, 
here is what you can and can't do with 
it," he says. 



Open Your Arms To Heterogeneity 

Despite the additional speed bumps, 
the trend toward greater heterogeneity in 
deployed operating systems is well-estab- 
lished. Increasingly relaxed corporate 
policies allowing employees to use their 
own mobile and desktop/laptop devices 
to connect to corporate resources makes 
Mac presence a virtual certainty in ever- 
growing numbers of shops. Support poli- 
cies that clearly outline expected service 
levels for Mac-based clients can reduce 
headaches later on. And as the Web's 
influence as an application development 



and deployment platform continues to 
grow, it's traditional resistance to for- 
merly niche solutions such as Macs will 
gradually soften. 

"These days, developers don't program 
for the OS; they're programming for the 
Web," says Ammos Chomy, former owner 
and operator of MacPoint, an authorized 
Apple dealership in Bogota, Colombia. 
"The days when a company would spend 
millions of dollars buying a complex 
solution to run their entire business for 
Windows only are over. Today, everything 
is increasingly based on the cloud, and the 
cloud does not care what OS you have." ^ 



What Does Mac-Friendliness Loolc Lilce? 

It's app-compatible: Cross-platform client software such as Microsoft Office makes easy 
work of sharing data files. Common default file types can further ease collaboration. 

It's mobile: iOS-based devices are driving demand, too, as tight coupling between iPhones, 
iPads, and Macs fuels productivity potential in the office. 

It's personal: Growing consumer adoption of Macs raises the likelihood of employees bringing 
their own equipment to work. 

It's Web-ified: Web- or cloud-based apps can remove any remaining barriers that may exist 
between platforms. 
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Security: Is Your 
Enterprise Protected? 

Is your enterprise as secure as it 
sliould be against today's biggest 
tlireats? We offer tips for making sure 
you're ready. 
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Inside Today's 
Biggest Threats | 

■ staying on top of today's threats 
is no easy feat, but examining recent 
trends and predicting future develop- 
_ ments can lielp 
enterprises 
anticipate tine 
^ future threat 
landscape and 
accordingly pro- 
tect their assets. 




Essential Elements To Keep 
Your Enterprise Secure | 25 

I Security is con- 
tinually changing, 
bringing with it 
all types of new 
strategies, tech- 
niques, and tech- 
nologies. But some of 
the elements remain the same, creat- 
ing a foundation for proper security that 
can act as the bedrock for your SME. 




Protect Yourself From 
Workers Gone Bad | 26 

■ Companies that devote the bulk of 
their IT security budgets to protecting 
against incursions 
fi'O'^ the outside 
- "^^y f'"^^ them- 

selves need- 
fcKB^^^^v^" lessly vulnera- 
,7 / pH^ ble to a stealthier 
kind of threat from 
the inside: their own employees. 



Building Information Security 
Policies & Training | 27 

■ Does your organization have a 
formal information security policy 
in place and a training program to 
ensure that that 
policy is clearly 
communicated 
to employ- 
ees? If not, 
you may be 
behind the curve. 




Inside Today's Biggest Threats 



New Threats Follow Closely Behind Technological Innovation 



by Christian Perry 
• • • 

As TECHNOLOGY EVOLVES to make 
enterprise life easier and more efficient, 
the same innovations behind that tech- 
nology inevitably find their way into the 
hands of Internet-based thieves and other 
malcontents looking to steal sensitive 
information, bring down Web sites, and 
cause other forms of havoc. Staying on 
top of today's threats is no easy feat, but 
examining recent trends and predicting 
future developments can help enterprises 
anticipate the future threat landscape and 
accordingly protect their assets. 



Key Points 



Threat protocols and nnotivations have 
shifted over recent years due to the rise 
in state-sponsored attacks and the focus 
on newer, nnore nnobile platforms. 

Increasingly common attacks on social net- 
works rely on the trust ecosystem to trick 
targets into clicking malicious links or oth- 
erwise handing over sensitive information. 

The mobile market represents the larg- 
est opportunity for attackers in the future, 
particularly with open platforms that allow 
near-complete freedom. 



Morphing Mindsets 

Now a pervasive element of everyday 
life, the Internet has given rise to a com- 
mitted generation of attackers with big 
goals in mind. Harry Sverdlove, CTO 
of Bit9 (www.bit9.com), explains that 
in just 20 years, we've gone from just 
a few dozen known threats to tens of 
millions. But it's perhaps not the mas- 
sive rise in volume that's most alarm- 
ing, but rather the nature and motivation 
of attackers. 

"State-sponsored threats represent 
an enemy with bottomless pockets and 
endless patience, and this has altered 
the nature of the attacks themselves," 
Sverdlove says. "They are not sim- 
ply interested in passwords and credit 
cards. They are not interested in attacks 
that go in, steal something, and get out. 
Instead, they go in, go stealth, establish 
a foothold, set up backdoors, and lay in 
wait for further instructions. Detecting 
the presence of these newer threats is 
harder than ever before." 

A casual observer might wonder 
if attackers can keep up with the rapid 
changes that have occurred on the 
Internet in recent years. The answer is 
a resounding "Yes." In fact, attackers 



adapt to change with stunning effi 
ciency, notes Jindrich Kubec. 
virus lab director at Avast 
Software (www.avast.com), 
and their focus is almost 
primarily the Internet. 
Kubec adds that the three 
major Internet-driven 
trends over recent years 
are everyday infect- 
ed sites, "poisoned" 
advertisements, and 
poisoned searches that 
lead to infected sites. 

The recent past has 
also witnessed a huge 
rise in the popular- 
ity of computing devices 
other than just desktops or 
laptops. According to Joe 
Silverman, CEO of New York 
Computer Help (www.newyork 
computerhelp.com), this now means 
that IT threats no longer affect only 
a single computer, but also all the other 
devices that sync to that computer. For 
example, when an email account is 
hacked, it affects the email on all devices 
that access the email, whether it's a lap- 
top, smartphone, or any other device that 
has email capabilities. 

Tailing Tlie Trends 

Today's biggest IT threats reflect the 
trends that continue to drive enterprise 
technology. For instance, the rise of 
social networking has spawned a new 
variety of threats that target popular 
services such as Facebook and Twitter. 
Michael Parish, managing director of 
Vivo (www.vivoinc.com), says that we're 
now seeing social posts entering enter- 
prise environments that contain malicious 
code or hyperlinks to high-risk Web sites. 
Because the intrinsic nature of social net- 
works relies on trust through a network 
of "friends," attacks that travel here are 
particularly effective because communi- 
cations within the network are perceived 
as trusted. Parish says. 

Another current trend causing big 
problems is spear phishing, a variant 
of traditional phishing attacks that use 
social engineering to trick people into 
clicking malicious links in email mes- 
sages or opening malicious attachments. 
Sverdlove says that spear phishing is 
more targeted, directing email messages 
to specific people with information that's 
relevant to those people. 

"Often the spear phishing attack will 
appear to come from a person the target 
knows," Sverdlove says. "People are 
still the most vulnerable part of any 
infrastructure, and sadly it is still too 




easy to get almost anyone to open any 
file if you can tailor the subject and 
content enough." 

Yet another big trend today — the 
cloud — is proving to be a stomping ground 
for attackers. According to Silverman, 
cloud tampering is evident at cloud back- 
up providers, where Silverman has seen 
file backups for companies mysteriously 
disappear. This occurred because an attack- 
er obtained usernames and passwords 
from company computers and breached 
the cloud account. 

But not all of today's biggest threats 
derive from newer technologies or imple- 
mentations of those technologies. For exam- 
ple, Silverman says one of today's most 
dangerous IT threats comes in the form of 
rogue IT consultants who lash back against 



company networks after being fired. "At 
the worst, the consultant may change 
the server administrator password 
or disable servers so the network 
and network drives are inac- 
cessible," he says. "It occurs 
more often than you'd think 
because these IT folks, at 
one time or another, have 
set up a remote access 
account to fix comput- 
er issues remotely when 
called upon." 

Mobile Dangers 

At the rate attacks are 
advancing in sophistica- 
tion and effectiveness, en- 
terprises can expect to deal 
with many security-related 
headaches in the future. Many 
of these, experts say, will revolve 
around mobile devices such as smart- 
phones, tablets, and even mobile phones. 
Sverdlove says these devices represent an 
"uncontrolled platform" on which attacks 
will focus and that IT will have a difficult 
time monitoring. 

"On a numerical basis, the threat 
to mobile devices is tiny," Kubec adds. 
"However, the conditions are there for a 
rapid change. We expect the first serious 
attacks to come through the Android sys- 
tems due to the open design and the rapid 
growth in various devices using it. Android 
openness means that the whole project is 
open to unknown sources — and some of 
them are not good. The single 'yes-no' 
global switch controlling the ability to 
download all non-market apps is a huge 
potential opening for bad things to enter. 
The walk-and-text issue should make peo- 
ple aware that real apps can be altered and 
returned to the marketplace — either through 
official or unofficial channels." H 



Awareness Alert 



Threats that dominate today's headlines typically exhibit high levels of cunning and sophistication 
that predictably draw the interest of enterprises and consumers alike. But while those threats are 
certainly dangerous and will continue to cause big problems now and in the future, the seemingly 
basic concept of awareness— or lack thereof— could represent the most dangerous threat to enter- 
prises today, according to Michael Parish, managing director of Vivo (www.vivoinc.com). 

"Organizational, educational, and security awareness remains a major threat to the enterprise because 
most organizations react to threats rather than proactively protecting against them," Parish says. "IT 
security leaders have two main hurdles to overcome. They have to first make sure that executives 
understand the true risk from a particular threat. Second, they must educate the user populace on 
how to behave in more secure ways to minimize the threats targeting them. Some would argue that 
the biggest danger to the enterprise is the lack of security awareness regarding threats— new and 
old— for employees, because they are your best defense when educated properly." 

Parish adds that threats tend to evolve based on the least-secure link in the chain. For enterprises, 
that link is people, and as people's behaviors and preferences change, so will the threats. 
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Essential Elements To Keep 
Your Enterprise Secure 

Does Your SME Have Everything It Needs To Stay Bulletproof? 



by Elizabeth Millard 
• • • 

Security is continually changing, 
bringing with it all types of new strat- 
egies, techniques, and technologies. 
But some of the elements remain the 
same, creating a foundation for proper 
security that can act as the bedrock for 
your SME. Here are some essentials to 
cement into place. 



Key Points 



Autonnation can help an IT departnnent 
do nnore with fewer people, which can be 
helpful if a security teann is overtaxed. 

Keeping an eye on insider threats is a vital 
part of security controls. 

Staying on top of regulations can be tricky, 
but it's an essential part of nnaintaining a 
healthy security strategy. 



Automation 

"Automation and integration are 
really the two holy grails of security 
processes — and, in fact, IT processes 
generally," says Geoff Webb, director 
of product marketing at Credant Tech- 
nologies (www.credant.com). He adds 
that automation helps an IT department 
do more with fewer people, which is 
vital to security teams that always seem 
to be shorthanded. 

Despite the utility of security process 
automation, however, the strategy has 
been slow to take off, Webb believes, 
because of distrust among security pro- 
fessionals that automation would result 
in either a flood of false alarms or missed 
opportunities to prevent an incident. But 
automation can pick up on security trends 
before they're spotted by IT or imple- 
ment controls on a more regular basis 
than a security professional might. 

Integration can also help, he notes, 
by reducing the workload on secu- 
rity teams. This part of the strategy 
involves centralizing the management 
and reporting of security tools, work- 
ing hand-in-hand with automation to 
streamline the process. 

Insider Threat Defenses 

Generally, many companies have 
been reluctant to do much about insider 
threats, says Jon Geater, director of tech- 
nical strategy at Thales e-Security (www 
. thales-esecurity . com) . 

"There comes a point, of course, 
where you have to trust your insiders — 
you can't bind up the organization in 
red tape in pursuit of perfect security," 
he says. "But the traditional model of 
an information free-for-all inside the 
firewall simply doesn't stand up any- 
more, if it ever did." 

Insider threats aren't always the work 
of disgruntled employees; they can take 
the form of malware that makes it into 
the network because of misguided or 



misinformed employees who download 
inappropriate files or plug in virus-lad- 
en flash drives without thinking twice 
about the dangers. 

"Ultimately, the insider threat is not 
just one threat, and it's not all about 
the revenge of the disgruntled system 
administrator," Geater says. "It's a suite 
of threats, some malicious, some acci- 
dental, some human, some automated. 
Organizations will seek out practical solu- 
tions to these problems, probably based on 
encryption for information security." 

Insider threats get blended with out- 
side threats when social engineering 
comes into play. Harry Sverdlove, 
CTO of security company Bit9 
(www.bit9.com), believes that this 
type of attack will continue to be 
one of the most common methods 
of entry for malware in the near 
future. "As long as people remain the 
most vulnerable part of an infrastruc- 
ture, social-based attacks will continue 
to be pervasive," he says. 

Regulation Know-How 

Data security standards are matur- 
ing all the time, Geater says. There's 
increasing sophistication in data breach 
regulations in all parts of the world, 
creating the need for specific direc- 
tives for data privacy and accountabil- 
ity around the use of encryption and 
digital signing. 

Of the more well-known regulations, 
Geater thinks compliance standards from 
the PCI Security Standards Council, which 
makes the rules that define online pay- 
ments and storage of such transactions, 
could have some added effect in the near 
future, as the council is set to release the 
validation requirements for the use of 
encryption technologies for protection of 
cardholder data. 

"That, combined with other releases slat- 
ed during the year, might finally sort out 
some of the confusion over the suitability 
of end-to-end encryption and tokenization 
as data protection methods and the need for 
strong hardware-backed key management 
to support them," he says. 

Enterprises should also watch stan- 
dards that are promoted by the National 
Institute of Standards and Technolo- 
gy, Sverdlove says, adding that certain 
standards, such as the Security Content 
Automation Protocol, are important 
because they provide the framework for 
different products and technologies to 
share information. Keeping on top of 
standards and regulations doesn't have 
to turn into a full-time job, but the tac- 
tic does benefit an enterprise that wants 
to create a strong foundation for its 
security strategy. 

Proactive Stance 

One of the most essential elements of any 
security strategy is the ability to prevent 
problems, rather than just react to them 
when they occur. "As attacks have become 
more sophisticated and traditional reac- 
tive security technologies have become less 



effective, companies have been turning to 
new paradigms," Sverdlove says. 

On the network and perimeter, he notes, 
the adoption of intrusion detection sys- 
tems and next-generation firewalls has 
increased. According to research firm 
Gartner, this type of firewall address- 
es limitations seen with first-generation 




firewalls, such as limited application aware- 
ness. The firm notes that next-generation 
firewalls are emerging that can detect appli- 
cation-specific attacks and enforce applica- 
tion-specific granular security policy, both 
inbound and outbound. 

On the endpoints and in data cen- 
ters, proactive defense techniques such 
as application control (also called white 
listing) and application virtualization are 
growing in popularity. 

These types of essential elements 
will continue to be adopted in the near 
future, Sverdlove believes, giving enter- 
prises more strength when it comes to 
securing data. M 

Other Security 
Essentials 

• Consistency in nnobile device purchasing 
and support to achieve higher levels of 
security 

• Encryption strategies 

• Network access control tactics 

• Periodic "fire drills" in which security con- 
trols are tested, sonnetinnes with the help of 
outside consultants 

• Protection for physical assets, which can 
include bionnetric controls for server roonns 
or sinnply strong locks and linnited access 

• Standardized procedures that can be used 
to track security trends and innplennent 
nnore security controls 

• Well-trained staff who are sent to courses 
and seminars to keep their security skills 
up-to-date 



Traditional Workplace 
Undergoing 
Communications 
Transformation 

More than 60% of businesses regularly allow 
employees to work remotely either full time or 
half time, according to a report conducted by 
Incites Research for Skype and GigaOM Pro. 
At those companies, 34% of employees spend 
about 40% of their time working at a client site, 
at home, or in a public space. 

The change is resulting in a "Living Workplace," 
Skype notes, shifting from a location-dependent 
workplace— which is slowly becoming more 
obsolete— to the future workplace that operates 
using consumer applications in a collabora- 
tive environment. 

Abhijeet Rane, senior vice president of research 
for Techaisle, says that the biggest difference 
between past and future workplaces is that work 
does not depend upon being at a particular geo- 
graphic location. And, as a result, communica- 
tion methods are changing. 

"Going forward, this location-independent work- 
ing will be supported by better communication 
and collaboration technologies. As smartphones 
get 'smarter' with better mobile communication 
applications . . . workers will have a plethora of 
options to communicate with each other," Rane 
says. 'The decline in the use of legacy commu- 
nication technologies is to be expected simply 
because more options are available." 

'The Future of Workplaces" survey, which inter- 
viewed 1 ,000 technology end users and decision 
makers, found that 68% of end users and 75% 
of decision makers say that working remotely 
is now more widely accepted than before. As 
expected, an oven^/helming majority of decision 
makers say employees appreciate the flexibility 
of remote working. 




Inforination Overload 

The survey also looked at technology informa- 
tion overload and the tools that might be failing 
to make work more efficient. More than 40% of 
those surveyed say the workplace suffers from 
information overload, and many believe email is 
the No. 1 contributor to that. 

"Email workload exists because the technology is 
being used to conduct real-time 'conversations,' 
which it wasn't really designed for," Rane says. 
That results in long interminable threads between 
individuals and groups. "IM/video can be used 
for urgent, real-time conversations; email can be 
used for broad notifications. While this does not 
directly alleviate email volume, it makes commu- 
nication more efficient by using appropriate tech- 
nologies for specific types of communication." 

Rane says video communication is essentially 
redefining a person's presence and availability. 
Video communication over mobile devices 
takes face-to-face conversations, interpersonal 
relationships, and enhanced customer service 
to another level. "With these technologies, 
SMBs can take advantage of labor forces all 
around the world, hire the best people regard- 
less of location, and save money on moving 
them between cities," Rane says. 

by Joanna Clay 
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■ Windows Grabs Lion's Share 
012010 08 Market 

Led by Microsoft, global operating system 
revenue reached $30.4 billion last year, climb- 
ing 7.8% from the previous year, according 
to Gartner. Overall, client OSes outperformed 
server OSes, Gartner states, growing 9.3% 
vs. 5.7%. Windows' global OS market share 
grew to 78.6% in 2010, totaling about $23.8 
billion, up from 77.9% and $21 .9 billion in 2009. 
Windows' client OS share grew 9.2% in 2010 
compared to 7.5% for its server OSes. IBM 
grabbed the next highest market share (7.5%; 
$2.3 billion revenue), followed by HP (3.7%; 
$1.1 billion), Oracle (2.6%; $780 million), and 
Red Hat (2%; $610 million). Among all OSes, 
Gartner says, Linux server OSes and Mac 
OS were the fastest growing subsegments. 
Charged by strong desktop and laptop sales, 
Mac OS grew 15.8% during 2010, reaching 
$520 million in revenue. "Within the Unix OS 
market, IBM AIX had high single-digit growth, 
but Unix generally experienced modest or 
negative growth," says Gartner managing vice 
president Alan Dayley. 

■ Mobile Apps Are Hot . . . 

The smartphone application markets are 
booming. IHS iSuppli reports that the com- 
bined revenues from Apple's App Store, 
Google's Android Market, Nokia's Ovi 
Store, and Research In Motion's BlackBerry 
App World will soar 77.7% this year to 




$3.8 bil- 
lion. Combined 
revenues in 2009 were 
$830.6 million; in 2010 they were $2.1 bil- 
lion. And with little sign of flagging momen- 
tum, iSuppli sees a bright future for the 
industry. The firm expects that revenues 
will balloon to $5.6 billion in 2012, $6.9 bil- 
lion in 2013, and $8.3 billion in 2014. 

■ . . . With Google Android Market 
Rapidly Gaining Ground 

Market research firm Distimo predicts in 
a new report that if all application stores 
maintain their current growth pace, in 
about five months, Google Android Market 
will be the largest store in terms of number 
of applications. Already, Distimo found that 
Google Android Market has passed Apple 
App Store (iPhone apps only) where free 
apps are concerned (134,342 vs. 121,845). 
Although the App Store (for iPhone) tops 
other stores where total apps (333,214) 
are concerned, it was among the slowest 
growing stores in terms of relative growth 
in March, Distimo reports. Apps for the 
iPad, meanwhile, grew 12% in March 
to reach 75,755, with about 34,000 of 
those being iPad-only apps. Combined, 
iPhone and iPad apps total 367,334. By 
June, however, Distimo predicts Google 
Android Market will have just 40,000 
fewer apps than Apple's store and will 
close the remaining gap before the end 
of July. Distimo also predicts BlackBerry 
App World will double its apps during a 
six-month stretch, passing Nokia Ovi Store 
sometime after May. Windows Phone 7 
Marketplace, meanwhile, is expected to top 
the Nokia and BlackBerry stores before the 
Windows Phone 7 Marketplace has been 
available for a full year. 
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Protect Yourself From 
Workers Gone B ad 

Evolved Security Processes Can Stop Rogue Employees In Their Tracks 



by Carmi Levy 
• • • 

Companies that devote the bulk of 
their IT security budgets to protect- 
ing against incursions from the outside 
world may find themselves needlessly 
vulnerable to a stealthier kind of threat 
from the inside: their own employees. 
Despite the fact that rogue employees 
could potentially deliver fundamental 
risk to the very heart of the organiza- 
tions, most shops are still looking out- 
side and not in. 



Key Points 



IT security needs to evolve to proactively 
identify internal threats before they conn- 
pronnise the organization's soft underbelly. 

Rogue ennployees aren't always intentional; 
in fact, technically inept ennployees at the 
root of inadvertent exposures can cost the 
organization just as nnuch as nnalicious ones. 

Security processes nnust be adapted to dif- 
ferent roles within the organization to nnore 
effectively balance control and productivity. 




"This problem is a hidden crisis," says 
Rob Marano, CEO of InDorse Technologies 
(www.indorse-tech.com). "A lot of business 
and IT leaders agree that it's a problem, but 
they don't really appreciate just how big a 
problem it is." 

Not Always Malicious 

Despite the popular perception of rogue 
employees as disgruntled staff surrepti- 
tiously planning a damaging exit, reality 
can be far less sinister. A technically inept 
employee with no intention of causing 
harm can cause just as much bottom-line 
pain as one who may be intent on revenge. 

"People bring files home on USB flash 
drives or personal devices all the time," 
Marano says. "How many times do they, 
when they leave their job, somehow for- 
get to delete these files? Do you think 
the company remembers?" 

Marano says these quietly forgotten 
files can be inadvertently exposed when 



peer-to-peer sharing tools are installed 
later on. The mobility revolution is 
raising the stakes still further. 

"Imagine an employee who brings 
in his own iPad, connects it up to the 
corporate network, and loads some 
files onto it," says Robby Gulri, vice 
president of product marketing with 
Echoworx (www.echoworx.com). "The 
next thing you know, they've left the 
unencrypted device on a bus or a train. 
That employee, despite no intention to 
harm, is rogue." 

Beyond Traditional Tools 

Accidental or not, traditional security 
tools and processes focused on protecting 
specific pieces of the infrastructure are 
insufficient. And in either case, the bot- 
tom-line damage can be just as significant. 

"No matter how you cut it, the major- 
ity of security solutions out there to pro- 
tect against loss are tied to the siloed 
approach," Marano says. "The key is that 
I can break that model very quickly as an 
authorized user because there's just no 
way to psychologically know that your 
employee is going rogue." 

Marano says security needs 
to evolve to recognize inter- 
nally originating threats. 
"If you watch the egress 
points of information, 
over time, you'll be- 
gin to understand 
employees' habits 
and behaviors," he 
says. This knowl- 
edge can heighten 
the organization's 
ability to identify 
changes to pattern 
behavior. "Under- 
standing your usage 
statistics can help 
put policy discovery in 
place right at the enforce- 
ment point." 

Marano says that this ensures 
IT won't be the last to know when 
an employee goes over to the dark side 
because the consequences will be known 
immediately, not weeks later following a 
forensic audit. "Forensics is expensive," 
he says, "and you'll never find out fast 
enough to do anything about it." 

The key lies in moving past perimeter- 
level security that fails to recognize threats 



that originate within — and never cross — 
the outer edge of the network, such as file- 
level security and solutions that actively 
and passively tag data files. (For more 
information, see the "Protect Files, Not 
Systems" sidebar.) 

"You need something that is live and 
inherently built into every piece of soft- 
ware for every file format that you use," 
Marano says. "You want it to be auto- 
matic, and you don't want to have to 
remember to do anything. If you rely 
on someone to manage these monitor- 
ing processes, what do you do when that 
someone turns malicious?" 

Look At The Parts Of The Whole 

Echoworx' s Gulri says organizations 
that have traditionally applied security 
to specific devices and systems need to 
expand their thinking. He recommends 
classifying people, as well. 

"Don't drop all of your users into one 
big bucket," Gulri says. "Don't apply the 
same security rules universally to every 
worker within the company. Instead, 
classify them by job function and design 
unique security rules for each group." 

Executives, information workers, field 
workers, and contractors use different 
applications in different ways and often 
from different locations. A one-size- 
fits-all security model makes it easi- 
er for employees who go bad to do so 
unnoticed. A more customized strate- 
gy allows IT to design effective policy 
frameworks for each group's specific 
needs, which can in turn increase IT's 
visibility into end-user behavior. 

Gulri says the rush of smartphones and 
tablets through corporate front and back 
doors is pushing IT to adapt its secu- 
rity approach. Mobile-aware centralized 
management consoles are coming into 
their own, offering IT more precise con- 
trol — including application whitelists and 
blacklists — over portable, often employee- 
owned devices that have traditionally 
been completely beyond IT's control. 

"If you want or need to revoke a user's 
credentials, management tools mean 
you don't need to have the device in the 
office," Gulri says. "If the device gets 
lost or if it's in the hands of a now-rogue 
employee, you can turn it off immediate- 
ly by removing the device's credentials 
or wiping it entirely. No more worrying 
about ongoing exposure." 



Protect Files, Not Systems 



File-level tagging means files don't just disappear when rogue employees spirit them away from 
corporate systems. Solutions that actively and passively tag data files can make it relatively 
easy for IT to track files after they've been wrongly removed from the corporate premises. 

"The beauty of cloud-based Web 2.0 is that it allows you to assign unique identifiers for every- 
one who signs in," says Rob Marano, CEO of InDorse Technologies (www.indorse-tech.com). 
Active tagging lets files proactively report that they've been opened, where they were opened, 
and by whom— even if they're well outside the firewall. Passive tagging allows IT to scan Web 
sites and peer-to-peer sites to find surreptitiously removed files. It all means unprecedented 
long-distance IT control over files that not long ago would have been long gone along with the 
rogue employees who stole them. 
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Building Information 
Security Policies & Training 



Get Executive Approval, Craft A Thoughtful Policy 
& Convey That Policy To Your Employees 



by Mike Chappie 
• • • 

Does your organization have a for- 
mal information security policy in place 
and a training program to ensure that that 
policy is clearly communicated to employ- 
ees? If not, you may be behind the curve, 
exposing your organization to both secu- 
rity risk and legal liability. 



Key Points 



Policies are often required by law or 
regulation, such as PCI DSS, HIPAA, or 
GLBA. In other cases, policies nnay shel- 
ter the organization fronn legal liability. 

Starting with executive support is a key 
step in creating an infornnation security 
policy. This underscores the innportance of 
the policy to other ennployees and creates 
an innpetus for change. 

Connnnon elennents of security policies 
include password requirennents, proce- 
dures for handling lost or stolen devices, 
and policies regarding access to and 
handling of sensitive infornnation. 



Policies form the cornerstone of an orga- 
nization' s information security program, 
underscoring management support in the 
minds of employees and providing clear 
statements of the organization's security phi- 
losophy and requirements. Richard Stames, 
president of the Bluegrass Chapter of the 
Information Systems Security Association 
(www.issa.org), feels that there are two 
main drivers for these policies in practice. 
"Largely, the need for information security 
policies is driven by regulatory compliance 
and the need for good governance," Stames 
says. Organizations subject to the require- 
ments of PCI DSS, GLBA, or HIPAA are 
among the many that must maintain an 
information security policy, while others 
should do so as a matter of best practice. 

If laws or regulations affecting your indus- 
try do not explicitly require the presence of a 
security policy, it still may be prudent from a 
legal perspective, according to Dallas-based 
attorney Ben Wright. "An information secu- 
rity policy can help an enterprise avoid (or 
reduce) legal liability for security mistakes, 
such as a leakage of personally identifiable 
information," Wright says. He cites the prec- 
edent of Guin V. Brazos Higher Ed. Service 
Corp, Inc., where the court cited the fact that 
the company had a written security policy as 
one of the reasons the company was not liable 
after losing a laptop containing information 
about student loan recipients. 

Policy Content 

When designing a security policy, Stames 
feels that the most important starting point is 
a statement of support from executive man- 
agement. "If that does not exist, the rest of 
the policy isn't worth the paper it's printed 
on," Stames says. Without such a statement, 
the policy is likely to gather dust on a shelf 
rather than becoming a living part of the 
organization's security culture. 



the firm's unique business requirements, 
culture, and operating environment. 

Training & Awareness Programs 

Developing an information security pol- 
icy is just the beginning of your adventure. 
Once you've created the policy, you should 
remember Stames' waming about it gather- 
ing dust on a shelf. One way to do this is to 
have a comprehensive training program for 
your staff. "At a minimum, employees should 
receive training annually, and your awareness 
program should touch an employee once a 
quarter," Stames says. "Remember, in many 
instances, a trained and aware employee may 
be your first and last line of defense." 

There are many different methods you can 
use to promote security awareness in your 
organization. "The key to formats is to be 
inventive, memorable, and change them up," 
Starnes says. He suggests hosting an infor- 
mation security fair and giving away small 
prizes to those who excel on security quizzes. 
Other organizations use more conventional 
techniques, such as in-person and Web-based 
training sessions, posters, and security aware- 
ness stories in company newsletters. 

Developing a solid security policy and 
backing it up with recurring training provides 



Jim Lippie, president of Thrive Net- 
works (www.thrivenetworks.com), says 
that information security policies should 
be data-focused and designed to protect 
an organization against the consequences 
of a data breach. "As a result, it's impor- 
tant that policies take a precautionary, 
proactive stance on security," Lippie 
adds. He suggests several key elements 
that should be included in any informa- 
tion security policy: 

• Password policies should provide 
guidelines for password length, com- 
plexity, and expiration date. Many 
organizations require that passwords 
be at least eight characters long and 
contain a mixture of uppercase and 
lowercase letters, numbers, and special 
characters. Lippie also recommends a 
90-day password change cycle. 

• Lost or stolen devices should also 
be addressed in the policy. In addi- 
tion to requiring encryption for data 
stored on mobile devices, organiza- 
tions should require that employees 
promptly report their loss to allow 
for the activation of remote wiping 
technology. "Though employees may 
not want to admit when their device 
is lost or stolen for fear of embarrass- 
ment or getting in trouble, it's impor- 
tant that they do so right away," 
Lippie says. 

• Access policies should die 
tate who may be granted 
access to information and 
the process for approving 
access permission addi- 
tions, modifications, and 
removals. The policy 
should also require a 
process for deprovision- 
ing accounts for users 
when their roles within 
the organization change 
or they are terminated. 

• Information handling 
policies provide details on 
acceptable uses of informa 
tion within your organization. You 
may include requirements for encrypt- 
ing sensitive information, physically 
destroying hardware at the end of its 
useful life, limiting the use of elec- 
tronic mail for sensitive data, and sim- 
ilar requirements. 

Of course, this list is just a starting 
point. The actual contents of an organiza- 
tion's security policy should be driven by 

PCI DSS Security Policy 

The Payment Card Industry Data Security Standard, or PCI DSS, requires that all organizations 
that store, process, or transmit credit card information maintain a written security policy that meets 
three fundamental requirements: 

1 . Addresses all 12 of the PCI DSS requirements. 

2. Includes a formal, annual risk assessment process that identifies threats and vulnerabilities 
in the cardholder data environment. 

3. Follows an annual review cycle, with updates performed whenever there are changes to 
the environment. 




an important foundation for your organiza- 
tion's risk management program. Lippie sums 
it up well: "The ramifications of not having 
such a policy can be dire, spanning finan- 
cial and reputational damage should a breach 
occur." These programs help mitigate the risk 
of security incidents and may limit your legal 
liability if they do occur, a 



Report: Hackers 
Changing Tactics 

Less data lost but more breaches. That's the 
main finding from Verizon's "201 1 Data Breach 
Investigations Report," which Verizon based on 
studying about 800 data breaches from 2010, 
the largest total it has tackled since beginning 
the report seven years ago. Conversely, the 
4 million records compromised as a result of 
those breaches is an all-time low, down from 
144 million in 2009. Verizon cites the drop to a 
significant decline in large-scale breaches. For 
201 1 's report, Verizon worked with the U.S. 
Secret Service and the National High Tech 
Crime Unit in the Netherlands. 





Rather than launching large-scale attacks 
that are more difficult to pull off and that 
can result in lengthy jail sentences and 
huge fines, Verizon states, cybercriminals 
are engaging in small, opportunistic attacks 
requiring relatively unsophisticated methods 
to successfully penetrate organizations. 

Hacking (50%) and malware (49%) were the 
most common attack methods, while physical 
attacks, such as hacking ATMs or point-of- 
sale terminals, totaled 29%. Overall, "outsid- 
ers" launched 92% of breaches. Although 
insider-based attacks fell to 16% from 49% in 
2010, the drop relates to the huge increase 
in smaller external attacks, Verizon reports, 
meaning the total number of insider attacks 
actually remained relatively constant. 

Start With Policy, Planning 

Wade Baker, Verizon director of risk intel- 
ligence, says that retail- and hospitality-based 
companies should focus security on their 
point-of-sale infrastructure, and other organi- 
zations should start with policy and planning. 
Many small organizations, he says, don't have 
these elements in place. "If they do, they're not 
communicated very well to staff," he says. 

Next are the processes, technology, and 
people needed to uphold security policies. 
"This is the first and critical line of defense," 
Baker says. "After studying thousands of data 
breaches, I would wager that an organiza- 
tion's next breach will stem from a failure to 
do what they have stipulated in policy that 
they should do." 

Baker also recommends implementing 
accountability procedures to ensure policies 
are being met. Often, he says, "it takes a very 
long time for the victim to discover they've 
been breached, and when they do learn of 
this, it's usually because a third party alerted 
them. The only way this will change is if orga- 
nizations increase awareness and visibility 
into what occurs in their networks, systems, 
and applications, which I realize is a big but 
important recommendation." 

Verizon found third parties discovered 86% 
of 201 0's breaches, up 25% from the year 
before. "Year after year, security measures 
designed to detect incidents are failing in a 
big way," Baker says. 

by Blaine Flamig 
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Cloud Security Concerns: 

Data Security Remains A Stumbling Block 
For Cloud Implementation 



BYDANHEILMAN 

Cloud computing has been touted as the future of data 
storage, but like any heavily hyped technology, it comes with 
some red flags. The No. 1 caveat with cloud computing is security: 
How can enterprises ensure the safety of their valuable data? 



Public vs. Private Cloud Security 

There are cloud-computing security risks in 
both public and private cloud settings, though 
most come from the public cloud sector, 
where company data is stored at an extemal 
resource, says Mark A. Gilmore, president of 
Wired Integrations (www.wiredint.com). 

"The biggest risk here is the breach 
of security on that data," Gilmore says. 



"With private clouds, the risk assessment 
should be geared more toward ensuring 
that the cloud partners' access to internal 
network infrastructure is limited to the 
task at hand and no more. Not properly 
locking things down could expose the 
infrastructure to unwanted breaches from 
the inside." 

Another concern is the possibility of 
a hacker breach against public cloud 




Prepare For The Worst 

What if the worst happens and a breach occurs? If it is a private breach, sever the connection 
to the cloud provider immediately and then determine how the breach occurred so that it can be 
dealt with, says Mark A. Gilmore, president of Wired Integrations (www.wiredint.com). If it is a 
public breach, you'll need to work with the provider to determine what happened and how best to 
minimize the damage. Have agreements in place so that everyone knows whaf s to happen if a 
breach occurs. 

Most of all, be careful of what you put out there. "Don't put anything into a public cloud that con- 
tains any sensitive information that, if exposed, would put the company at risk," Gilmore says. 



systems used by enterprises employing 
infrastructure-as-a-service or platform- 
as-a-service cloud storage, says Kevin 
Rowney, director of breach response for 
Symantec (www.symantec.com). 

"It's often in the later stages of plan- 
ning that security issues around protection 
against data breach and compliance mat- 
ters enter into the conversation," Rowney 
says. "Organizations need stronger infor- 
mation governance for managing corpo- 
rate information and enabling confidence 
in the cloud." 

Knowledge Is Key 

That doesn't mean, however, that you 
shouldn't do lots of due diligence before 
you choose a cloud infrastructure provider. 
"Preparation for the deployment [of cloud 
storage] is at least 80% of the battle," Gilmore 
says. "If you leave this piece up to the pro- 
vider, you are asking for trouble." 



Another way to minimize risk of a breach 
is to also research the technology being 
used on both the provider's end and yours. 
"Utilize only trusted and validated virtual 
appliances and ensure that people config- 
uring virtual firewall and network settings 
understand the technology they are using," 
says Philip C. Cox, director of Security and 
Compliance at SystemExperts. 

There are other preventive measures you 
can take in-house. Symantec's Rowney rec- 
ommends adopting an information-centric 
approach to identify the top categories of sen- 
sitive content and develop data loss protec- 
tion-based detection rules to detect that data. 

"Organizations can then triage out their 
workloads into levels of risk depending on 
the data they process," he says. "Modem data 
loss prevention systems are now quite capable 
of providing such diagnoses. Scanning these 
systems for sensitive data is a proactive way 
to reassure the rest of the enterprise that the 
workload placement is appropriate." □ 
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Advanced persistent threats, or APIs, are cyber attackers with 
the resources to use multiple attack vectors and the motivation 
to keep attacking a particular organization repeatedly for a long 
period of time. 



Although APTs usually target government agencies and 
large enterprises, they may also try to infiltrate smaller 
organizations if they provide a weak link for gaining access 
to the targeted organization. 



Defense-in-depth and agile defense strategies can help 
organizations defend against APTs. 



Advanced Persistent Threats 

APTs Use Multiple Methods To Attempt To Access Networks & They Don't Give Up Easily 

BY CYNTHIA HARVEY 

Recently, some high-profile cyber attacks have brought the phrase "advanced 
persistent threat, " or APT, into more common use; for example, last year 
Google revealed that it and 33 other companies had been the victims of a 
long-term, sophisticated APT attack originating in China. 



Organizations of all types and sizes find 
these incidents troubling. Eddie Schwartz, 
chief security officer for NetWitness (www 
.netwitness.com), notes, "Because these 
APTs tend to highlight the failures of infor- 
mation security in some pretty high-profile 
companies that are using traditional best 
practices to information security, the out- 
come is alarming to organizations who are 
trying to figure out defensive techniques." 

As a result, IT managers at many small 
to midsized enterprises are wondering what 
exactly APT is, how it's different from other 
cyber threats, and what they can do to com- 
bat the risk. 

■ NOT YOUR AVERAGE 
CYBER ATTACK 

The majority of cyber attacks occur when 
hackers see an opportunity to make a quick 



buck by stealing credit card numbers or 
similar information. Gunter OUmann, vice 
president of research at Damballa (www 
.damballa.com), explains, "APTs are dif- 
ferent from the other security threats that 
organizations face on a daily basis due to 
the patience of the adversary and the plan- 
ning that goes into constructing an attack." 

Although any organization can become 
the victim of a garden- variety cyber attack, 
Schwartz says that APTs threaten data 
belonging to "organizations who have some 
sort of asset that would be of interest to a 
nation-state or group acting on behalf of a 
nation-state downstream in some way." 

In its "Managing Information Security 
Risk" paper, the National Institute of 
Standards and Technology (www.nist.gov) 
defines APT as "an adversary that pos- 
sesses sophisticated levels of expertise 



and significant resources which allow it to 
create opportunities to achieve its objec- 
tives by using multiple attack vectors." In 
addition, NIST says this type of attacker 
is persistent, adaptable, and determined in 
its attacks. 

These attacks often abuse trusted 
connections. Unfortunately, this type 
of attack is both difficult to detect and 
nearly impossible to prevent. 

■ IS YOUR COMPANY AT RISK? 

According to Ollmann, "If [SMEs] hold 
strategic data that could be leveraged by 
nation-states to their advantage, then yes, 
they should be very concerned. Similarly, 
if they subcontract to large and strategic 
organizations, they may similarly be tar- 
geted by APTs because they may be a 
weak link for infiltrating the true target." 

How can you defend your data center 
against APTs? "Defense-in-depth and the 
deployment of best-of-breed technologies 
is mandatory," Ollmann says. 

NIST advises a strategy that combines 
traditional boundary protection with agile 
defense. "Agile defense assumes that a 
small percentage of threats from purposeful 



cyber attacks will be successful," the agen- 
cy explains. "Agile defense employs the 
concept of information system resilience — 
that is, the ability of systems to operate 
while under attack, even in a degraded or 
debilitated state, and to rapidly recover 
operational capabilities for essential func- 
tions after a successful attack." 

Percent Of Overall 
Victims By Sector 



In a 201 1 report, security vendor Mandiant found 
that 42% of the APT incidents with which it was 
familiar targeted commercial organizations. 




Defense 



industrial base 31 % Commercial 42% 
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Better Understanding 
Electronically Stored Information 

Know What You Have, How Long It Needs To Be Kept & How Best To Store It 



by Robyn Weisman 
• • • 

Electronically stored information, 

or ESI, seems pretty self-explanatory, but 
a definition for it does exist. "If you use 
the [Federal] Court's view, ESI is anything 
that can be digitally stored and is potentially 
discoverable," says John 
Bace, research vice presi- 
dent at Gartner. 

The Federal Rules of 
Civil Procedure formally 
defined ESI in early 2006 
and put it into effect that 
December. "Up until that 
point, believe it or not, law- 
yers were going into court 
and arguing that email and 
other electronic documents 
were not valid until they 
were inked on paper," Bace explains. 

Dave Canfield, managing consultant 
for the electronically stored informa- 
tion consulting group at Kroll Ontrack 
(www.krollontrack.com), says that ESI 



encompasses everything from traditional 
data, such as email and Microsoft Office 
files, to less traditional information, such 
as unified messaging, electronically stored 
voicemail, video, and scanned documents, 
among other things. "Anything that can 
be stored as an electronic file that can 



"Anything that can be stored as an 
electronic file that can be retrieved, 
viewed, and accessed falls under 
that definition [of ESI]." 



Kroll Ontrack' s Dave Canfield 



be retrieved, viewed, and accessed falls 
under that definition," Canfield says. "It's 
deliberately broad and gives most people 
a headache as they're trying to deal with it 
from a legal perspective." 
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How To Judge Your Data 

Given that ESI covers just about every- 
thing that isn't in analog form, how do 
you come up with an effective infor- 
mation governance plan? According to 
Bace, you first need to understand two 
primary components of each piece of ESI 
you have. "When 
you create a piece 
of information, 
that information 
has value, which 
is generally high- 
est at the point of 
its creation, and 
it has a potential 
preservation obli- 
gation attached to 
it — in other words, 
you have to keep it 
around for a certain period of time for 
whatever reason," Bace says. 

Bace gives two examples that describe the 
difference between the two concepts. "If I 
am sitting at my Gartner terminal, and I send 
an email to my son about the Chicago Cubs, 
the value of this piece of information I have 
just created in my Gartner email account is 
priceless. However, there is no preservation 
obligation attached to it, so it can disappear as 
quickly as it appeared," Bace explains. 

In contrast, if Bace interviews a job can- 
didate at his base in Chicago and sends 
his San Diego-based manager notes on 
the candidate via email, those notes have 
both value and a preservation obliga- 
tion attached to them. "They have value 
because they represent an investment of 
our time looking at a potential candidate, 
and then it could be argued that they're 
the beginning of an employment record, 
which needs to be kept for a minimum of 
two years in the state of Illinois," Bace 
says. "Those are the types of issues that 
IT, legal, and business need to understand 
when they're looking at the big picture." 

Handling Information Governance 

Information governance involves three 
parties within an organization: the business 
owners and/or those responsible for a com- 
pany's direction; the legal department, which 
keeps track of compliance-related concems; 
and IT, which implements the plan. "IT is 
not going to be the one who is going to take 
and determine what's important. Their job is 
to make sure that they can take and execute 
on the ESI plan," Bace explains. 

However, Federal Rules of Civil Pro- 
cedure do not specify any requirements or 
guidelines for storing ESI. "The rules are 



Key Points 



ESI encompasses pretty much everything 
that is in digital form, whether it's traditional 
electronic data, such as email, or paper and 
ink documents that have been scanned. 

Understanding the value of— and your pres- 
ervation obligation for— your pieces of ESI is 
key to knowing how to properly archive them. 

Make sure IT, your organization's deci- 
sion-makers, and your legal counsel are 
all on the same page before executing 
any governance plan. 



intended to let a business still operate in the 
normal course that the business operates," 
Canfield says. "But if you are, or reason- 
ably believe you could be, the subject of 
an investigation or litigation, you do have 
a requirement to identify and preserve the 
sources of data that are potentially relevant." 

But, as Canfield points out, nobody plans for 
multiple litigations in their budgetary cycles, 
and figuring out which department's budget 
takes the hit only compounds the nightmare. 
"Unfortunately, the C-suite or legal mandates 
the project, and then they tend to just drop it in 
it's lap, and IT will typically just buy a box or 
buy a cloud service and start shoving data in 
there without really understanding its ramifica- 
tions — a recipe for disaster," he says. 

"If they had taken a little extra time to define 
the parameters and what should go in and how 
it should be retained, they could have saved a 
significant amount of time, cost, money, and 
effort going forward," Canfield says. 

Proper Archiving Strategies 

Once your organization has defined its 
parameters, you need to find archiving 
technologies that enable you to access and 
export information easily. "For the most 
part, we're looking at the same archiving 
technologies that have been out there for 
seven, eight, or nine years now, designed to 
pull data from email and other types of traf- 
fic and just store it," Canfield says. 

Jennifer Walzer, CEO of Backup My Info! 
(www.backupmyinfo.com), says that a good 
archiving solution has to give you the ability to 
grab specific data, such as an email conversa- 
tion between two individuals, without having 
to slog through unrelated information of the 
other 998 employees in an organization. "Find 
a tool or application that lets you quickly index 
all of your data; otherwise, it will be nearly 
impossible to find what you need," she says. E9 



No Room For Tape 

If you're archiving your ESI on backup tapes, you are courting disaster, says Jennifer Walzer, 
CEO of Backup My Info! (www.backupmyinfo.com). "Tapes are hard to restore from because you 
have to go through so many tapes to find out where a file is, which is a disaster," she says. 

Dave Canfield, managing consultant for the electronically stored information consulting 
group at Kroll Ontrack, concurs. "Pulling data back from tapes and getting it processed is 
expensive and catches a lot of ClOs off-guard," he says. 
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Buying Tips: 




by Seth Colaner & 
Corey Russman 

Because data represents, 

at its essence, the heart of any 
company, acquiring the right data 
backup hardware, software, and 
services is crucial to a business' 
success. Here are some issues to 
consider when you're in the mar- 
ket for a data backup solution. 

Take a strategic view. To get 
started, enterprises need to take 
a strategic view when selecting a 
new backup product, says Rajeev 
Atluri, CTO of InMage (www 
.inmage.com). Is your enterprise 
looking to eliminate backup win- 
dows? Maximize application avail- 
ability? Minimize data loss? Lower 
management burdens? Knowing the 
answers to those questions can help you 
make the best decision, Atluri says. 

One big mistake, he says, is that enter- 
prises too often take a short-term perspective 



Buyers' Checklist 

as fast as possible, 
availability and expertise. 

M,„g as Me data as possible. 



and invest in workarounds 
that have to be replaced in a year or two. 

Cost. When making a capital purchase, 
you need to ensure that the products will 
meet your current needs as well as your 
future ones. For example, Ben Ginster, 
channel marketing manager for Idealstor 



(www.idealstor.com), suggests that you 
should be able to simply purchase higher- 
capacity disks when your business grows 
instead of having to completely revamp 
your storage infrastructure. If you're con- 
sidering using a cloud vendor, look for 
flexibility and expandability in their pro- 
gram offerings and bear in mind the costs 
associated with scaling up. 
Additionally, look for technologies 
that result in reduced costs, such as 
data reduction, which limits redun- 
dant data and helps SMEs avoid 
paying for extra storage capacity 
they don't need. 

Shopping for a vendor. Because 
you're effectively trusting a ven- 
dor with your company's sensitive 
and mission-critical data, security 
and trust are paramount. Hardware 
must have a reputation for reliabili- 
ty, and software needs to be as free 
from vulnerabilities as possible to 
avoid exploits by cybercriminals 
and costly crashes. The compa- 
nies that sell those products need 
to be able to quickly and com- 
pletely respond to any issues that 
arise, too. 

Ease of use. If your data 
backup solution requires a sys- 
tem administrator or an indi- 
vidual with a high degree of network 
expertise to perform tasks that could 
be automated, simplified, or performed 
by an employee with less experience, 
you'll be wasting money and the time of 
an employee who could be doing other 
more expertise-appropriate tasks. 



Jeff Rector, director of marketing at 
Quantum (www.quantum.com), suggests 
looking for solutions with setup wizards 
and other administrative software that 
the average user can install, configure, 
and use to troubleshoot. Also, be sure 
that you're able to access your archives 
quickly, that a technology or vendor 
offers backward compatibility, and that 
speed is optimized. 

Technical support. Everything breaks 
eventually, and when it' s your data backup 
solution, you need to fix the issue and get 
back online as soon as possible. Look for a 
vendor with 24/7 customer support; a high 
level of technical expertise from support 
personnel is a must. 

Watch for the next generation. 
InMage' s Atluri says that enterprises need 
to be sure to consider next-generation 
solutions that offer both backup and disas- 
ter recovery in a single product. Realize 
that a phased approach is possible when 
adopting such a solution, he says, and that 
investment in training and focused product 
adoption can help ensure your enterprise 
realizes the full benefits of the product. □ 



Key Terms 



SAS 70 type II certification. An industry 
standard that is awarded to vendors or 
service providers that adhere to certain 
criteria to ensure security and control. 

Service-level agreement. An SLA is a 

document that defines the terms of service 
between a customer and a service provider. 
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Data Backup & Disaster Recovery 



Arkeia vStorage Virtual Appliance C2C ArchiveOne Enterprise 




Arkeia's vStorage Virtual Appliance is a comprehensive 
backup and recovery tool for VMware vSphere 4 plat- 
forms and VMware Infrastructure 3. The virtual appliance 
includes Arkeia vStorage Backup Agent and can be 
rapidly deployed in and be used to back up any vSphere 
hypervisor. Arkeia vStorage Backup Agent enables local 
and over-the-network backups to disk, tape, or to disk 
and then tape, and backup sets can be replicated locally 
or over a WAN. 

• Management through Arkeia's Web-based interface 

• VMware CBT (Changed Block Training) 

• vCenter integration, vApp support, and RDM (Raw 
Device Mapping) 

• Enables full, incremental, and differential backups 

• Includes one year of maintenance 

Best For: VMware vSphere environments. 




C2C's ArchiveOne Enterprise is designed to give 
Exchange administrators a simple yet sophisticated tool 
to improve the health of the email system and deliver 
greater efficiency of storage and unrivalled power to 
both live and archived data. ArchiveOne Enterprise is 
designed to remove all unwanted email and other data 
items from live Exchange servers, enforce corporate 
e-policies, and search email with an unlimited scope. 
ArchiveOne Enterprise can be installed in about one 
hour, with little training needed. 

• Fully automated mailbox quota management 

• Advanced PST discovery and management 

• Extensive retention period controls 

• E-discovery for performing forensic searches 

Best For: Situations requiring sophisticated archiving, 
retention, e-discovery, and compliance with an easy 
learning curve for users. 



CommVault Simpana 9 



SB El IS ^■y .^ii' -'^lii o 




CommVault Simpana 9 eliminates the need for a myriad of 
disparate point-level products; reduces costs; and is inher- 
ently flexible, efficient, scalable, and adaptable. The tool 
offers modern data management with a tightly integrated 
blend of snapshot management, replication, and persistent 
copies designed to be secure, deduplicated, managed, 
and accessible through a single, unified platform. Simpana 
9 can quickly create copies that are highly available by 
integrating and leveraging hardware array-based snapshot 
technologies and can move data efficiently to disk, tape, 
or cloud storage. Data can be easily recovered for disaster 
recovery, data mining, e-discovery, or compliance. 

• Massive virtual ization performance and scalability 

• Efficient data deduplication for improved network trans- 
fer while cutting the backup window in half 

• Simplified licensing, administration, and management 

• Enhanced migration capabilities and services 

Best For: Companies that require significant control 
over data with optimal protection in a variety of 
storage environments. 



Nasuni Filer 



The Nasuni Filer is a virtual NAS appliance that offers 
traditional NAS capabilities via the cloud. The Filer is 
designed to make file access, storage, and protection easy 
and inexpensive by removing costs associated with hard- 
ware. Features include the ability to monitor cache, man- 
age volumes and performance, and set file protections, 
and the Filer supports Active Directory, file encryption, 
deduplication, and synchronous snapshots. 

• Simple to set up and use 

• Ability to choose from a variety of different cloud provid- 
ers, including Amazon Web Services and RackSpace 
Cloud 

• Easily scalable 

• Can be configured for primary or secondary storage 

Best For: Leveraging the cloud to store and protect the 
expanding file volumes offsite while retaining the local per- 
formance and functionality of an advanced NAS appliance. 



Quantunn DXi4500 




Quantum's DXi4500 appliances are turnkey solutions 
that can be deployed seamlessly with all leading back- 
up software using a simple NAS interface. They are 
designed for rapid, seamless integration and maximum 
client performance without changes to existing backup 
architectures or potentially disruptive media server 
upgrades, unlike software-based deduplication. Each 
DXi4500 model includes support for remote replication, 
virtual environments, and Symantec's OpenStorage 
interface as standard features. 

• Data deduplication in an easily shared NAS device 

• Two preconfigured models with 2TB or 4TB 
usable capacity 

• Reduces typical disk capacity needs by 90% or more 
through deduplication 

Best For: SMBs and branch offices in distributed sites 
that are seeking an affordable disaster recovery solution. 



Quantum Scalar 140/180 



Quantum's Scalar i40 and i80 are intelligent tape librar- 
ies for small and medium-sized businesses and remote 
office environments of larger enterprises that are looking 
to save time and money spent on storage management. 
With embedded iLayer technology, the 140 and 180 pro- 
vide users with simpler tape management, fewer service 
I calls, and market-leading investment protection through 
capacity-on-demand scalability. 

• Simplifies tasks, including initial setup, ongoing 
management, and adding capacity over time 

• Reduces library management time by 50% 

• The 140 scales from 25 to 40 slots, and the ISO scales 
from 50 to 80 slots with a software license 

Best For: SMBs and remote office environments. 



Product 



Description 



Product 



Description 



Price: $300 month to month; $250 with one-year prepay; 
$200 with two-year prepay 
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Processofs Product Spotlight highlights options available in key data center product categories, providing product information side-by-side for easy comparison. 

Compiled by Seth Colaner 



DataRecovery.com 



ESS Data Recovery 

www.d a ta recove ry. co m 



real labs, real people, 

REAL RECOVERY 




DataRecovery.com's services are designed to be both 
affordable and fast, with a range of data recovery options 
available for every budget and every data loss situation. 
DataRecovery.com can recover data from everything 
from a single hard drive to a RAID storage array. The 
company has developed a strong reputation worldwide 
during its 12-year history, with a division focused on 
RAID, SAN, and NAS storage that is frequently used by 
Fortune 500 companies. 

• No data, no-charge guarantee 

• Supports every data storage medium, including tapes 
and servers 

• 24/7 and onsite services for critical situations 

• Different pricing and turnaround levels available 

Best For: Enterprises needing data recovered from 
virtually any failed system. 

Pricing: Starts at $500 for single drive recovery 

Contact: (800) 237-4200 I www.datarecovery.com 



Idealstor Bantam 




The Idealstor Bantam is a removable disk backup system 
that combines the best of disk and tape by using 2.5-inch 
SATA disks as backup media, which can then be sent 
offsite for storage and disaster recovery. The Bantam is 
priced for SME budgets but has features that meet the 
needs of larger enterprises, as well. The system features 
data transfer rates of up to 480MBps and is bundled with 
iBac Data Protection Software from Idealstor. 

• Complete backup system offering up to 1TB of remov- 
able disk capacity 

• Disk capacities of 320GB, 500GB, 750GB, and 1TB 
currently available 

• Includes iBac 5.0 for native format backup and drag- 
and-drop restore with data deduplication 

• Bantam cartridges are housed in a rugged aluminum 
frame and are shock-proofed 

Best For: Replacing tape backup with a faster, larger, 
and more reliable backup media. 



InMage scout 6.0 



I Create Failover Scenario 
-O- 
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InMage scout leverages the advantages of disk-based 
data protection to provide enterprises with application- 
aware recovery. InMage scout captures data changes in 
real time, performing local backup or remote replication. 
Version 6.0 provides support for all major enterprise 
platforms, can work across complex heterogeneous stor- 
age, and supports both synchronous and asynchronous 
protection so enterprises can choose the level of protec- 
tion that's best. 

• Elimination of backup windows (data is backed up to 
disk real-time 24/7) 

• Supports both Fibre Channel- and IP-based transports 

• Doesn't require storage virtualization or pass-through 
configurations 

• Zero and near-zero data loss protection support 

• Supports Windows, Linux, VMware, Solaris, AIX, 
Hyper- V, and XenServer 

Best For: Enterprises in need of a single product to 
manage complex storage environments. 



Spectra Logic Midrange T-Series 




The Spectra Logic T-series of tape libraries include the 
Spectra T200, T380, and T680, which are designed 
with scalability in mind. Built on the company's Tran- 
Scale architecture, the tape libraries feature inter- 
changeable components that make scaling up easier. 
With up to 2PB of storage capacity, the tape libraries 
also feature free encryption key management; media, 
drive, and library health monitoring; and partitioning 
and remote management. 

• Management via Web browser for easy operation 

• Built-in BlueScale AES 256-bit encryption and 
key management 

• Monitors its own drives, power supplies, controller, 
and robotics 

• Media Lifecycle Management and Certified Media tools 
detect media errors before they happen 

Best For: Midrange data centers. 



Spectra Logic T50e Tape Library 




The Spectra T50e tape library features 30 to 150TB of 
storage (thanks to LTO-5 tape storage technology) in 
a 4U rackmount system and supports transfer rates of 
up to 280MBps. Designed to offer enterprise-class fea- 
tures to the SME market, the T50e runs the BlueScale 
management interface and features free encryption key 
management; partitioning and remote management; and 
media, drive, and library health monitoring. 

• Management via Web browser for easy operation 

• Built-in BlueScale AES 256-bit encryption and key 
management 

• Monitors its own drives, power supplies, controller, 
and robotics 

• Media Lifecycle Management and Certified Media 
tools detect media errors before they happen 

Best For: SMEs and remote offices. 



TOLIS Group bruAPP 




The bruAPP™ backup appliance resolves the issues of 
configuration, installation, and compatibility faced when 
implementing a networked system backup strategy. 
Proven reliability, cost-effectiveness, scalability, and client 
system software agents available for all modern operating 
systems are delivered without the requirement for heavily 
experienced system/network administrative personnel. 
Tightly integrated hardware components, and the vener- 
able BRU™ software, provide backup and restore services 
independent of any server on the network. 1 U to 7U mod- 
els are available to provide D2T, D2D, and D2D2T opera- 
tions; up to 28TB of net RAID disk stage capacity (RAID 
5 + hot spare); and internal tape technology up to eight 
drives and 96 slots. 

• Enterprise-grade client/server backup services 

• Windows, Linux, and Mac OS X management consoles 

• Plug-and-play installation and intuitive operation 

• Totally self-contained using server-grade components 



Best For: Enterprises in need of a complete backup and 
restore appliance. 
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News 



m Google Named 

Most Reputable Company 

Google is considered tine most reputable 
company in the United States, according 
to a recent Harris Interactive Poll. The poll 
gathered opinions from more than 30,000 
respondents and asked them to identify 60 
of the most visible companies in the United 
States and rate them on 20 attributes, 
including financial performance, emotional 
appearance, and social responsibility. Google 
topped the list with 84.05 out of 100 points on 
the reputation scale; 80 points and above is 
considered excellent. Other tech companies 
making the list include Apple at No. 5, Intel at 
No. 6, Amazon at No. 8, Sony at No. 14, and 
Microsoft at No. 16. 

■ Virtualization, Cloud Computing 
Help Citrix Revenue 

Citrix Systems' first-quarter profit increased by 
55% to $73.5 million, or 38 cents per share. 
Citrix reported first quarter revenues of $491 
million, thanks to Citrix's dedication to desk- 
top virtualization and SaaS expansion, says 
Citrix CFO David Henshall. New license sales 
produced $150 million profit, which increased 
by 22% compared to last year. Tech services 
received a 44% boost primarily because of 
record consulting demand and support agree- 
ments attached to networking products, the 
company reports. Revenue for data center and 
cloud business reached $78 million. 

■Arrow Electronics Makes Buy 

Arrow Electronics continues its expansion into 
unified communications, telephony, and man- 
aged services with the acquisition of networking 
solution provider Cross Telecom of Bloomington, 
Minn. The Melville, N.Y., company did not dis- 
close financial terms of the deal but said that the 
first year of combined operations would see a 
bump of between 1 cent and 5 cents per share 
attributable to the Cross Telecom addition. Cross 
Telecom is currently known as a leading part- 
ner of enterprise communications giant Avaya. 
Arrow Electronics subsidiary Shared Technol- 
ogies will manage Cross Telecom. 

■ Larger Firms Reject 
Public Cloud Storage 

Few enterprise-class corporations are utilizing 
or considering using the public cloud for storing 
data — even noncritical data. Of the 240 Fortune 
1000 corporations surveyed by ThelnfoPro, 
fewer than 1 0% indicate a willingness to consider 




the public cloud as a place for archiving data. 
Instead, large organizations are concentrating on 
the use of solid-state drive technology and serv- 
er virtualization as tools for improving efficiency 
and providing storage options. Most companies, 
however, report no reluctance to adopt the pri- 
vate cloud as a storage medium, although about 
20% indicate they have encountered reliability 
issues with their private clouds. 

■ SAP Growth Slower Than Expected 

SAP released its first quarter earnings, which 
showed a 21% growth in revenue but only a 
4% growth in profit. SAP's operating expens- 
es rose 24%, at least partially accounting for 
the slower profit growth. SAP earned €3 bil- 
lion in revenue for the quarter and the profit 
was €403 million. The company originally 
planned for a 10 to 14% growth for its soft- 
ware arm this year and hasn't changed that 
goal, even in light of these results. 



STORAGE 



HOW TO 



Boost Your 
Disaster Readiness 

Process & Planning Can Get Your Enterprise In Order 



by Christian Perry 
• • • 

Toiling over daily data center hassles 
can be a big challenge for any IT team, but 
when a disaster rears its head, those has- 
sles will seem like child's play. Dealing 
with disaster is never easy, but there are 
methods organizations can use to better 
prepare themselves for the unfortunate 
moment an emergency does occur. These 
steps for boosting disaster readiness can 
be applied in any organization, regardless 
of size, and are well worth the effort and 
cost — even if only for peace of mind. 

"In part because of the business climate 
and the current economy, business leaders 
tend to put disaster readiness at the bottom 



Key Points 



Gaining the buy-in of senior leadership 
is a critical connponent to boosting both 
the awareness and effectiveness of 
disaster readiness. 

Methodologies such as OGSM (Objective, 
Goals, Strategy, and Measures), BCM 
(business continuity nnanagennent), and 
ERM (enterprise risk nnanagennent) can 
provide the necessary structure to build a 
recovery plan that won't fail in the event of 
a disaster. 

Multiple technologies and resources can 
help with readiness, but avoid relying on 
thenn instead of looking for areas of in- 
house innprovennent. 



of their list," says Annie Searle, principal 
of Annie Searle & Associates. "It all seems 
so improbable that something bad would 
happen, and yet we see these things hap- 
pen over and over again. A full one-quarter 
of all businesses close after a high-impact 
event because they have not planned ahead. 
Why not learn from clues left by Hurricane 
Katrina or the Haiti earthquake or the more 
recent triple-punch of events in Japan?" 

Look Inside 

One of the first steps involved with boost- 
ing disaster readiness is understanding the 
most critical business processes and func- 
tions inside the company, Searle says. These 
processes — as identified by senior execu- 
tives — in turn should be mapped to their cur- 
rent technology platforms. However, obtain- 
ing that identification is not always an easy 
process, particularly if those senior execu- 
tives aren't on board with the plan. 

Mike Meikle, CEO of the Hawkthorne 
Group, says, "One of the prime pieces 
of information that IT managers need 
to know is the level of senior leadership 
engagement in the process. If senior lead- 
ership does not have buy-in or is [not] 
engaged in the disaster recovery /readiness 
process, then the entire effort could fail. 
Disaster readiness and its accompanying 
plans start from the leadership of the orga- 
nization and must be driven by them." 

One way to solicit discussion and get buy- 
in from leaders, according to Sean Murphy, 
president and CEO of Lootok (www. loot 
ok.com), is through the OGSM (Objective, 



Goals, Strategy, and Measures) methodolo- 
gy, which can help to clearly map definitions 
in the organization, along with key relation- 
ships, terms, and conditions. However, if 
IT recovery — what Murphy says is the pre- 
ferred term for disaster readiness — follows 
an OGSM method, it should fall in line with 
the greater organizational OGSM. 

Another concept Murphy recommends is 
contingency planning, also known as BCM 
(business continuity management), which en- 
compasses crisis management, crisis commu- 
nications, emergency management, business 
recovery, IT recovery, and product incident. 
As a component of ERM (enterprise risk 
management), contingency planning should 
be integrated within an ERM program. The 
goal is to create one master contingency plan- 
ning program that contains the various mod- 
els, frameworks, and methodologies that will 
serve as workflow for disaster readiness. 

Focus On Process 

When it comes to disaster readiness, pro- 
cess and practice reign supreme. Murphy 
recommends incorporating regular disaster 
readiness scenario planning and exercises that 
deliver hands-on experience for the organiza- 
tion' s team, and these activities should drive 
workflow. Start with the end in mind and 
tailor your readiness activities based on the 
outcome of the practice. He also advises the 
use of branding and marketing to promote the 
readiness program in the organization. 

"In a sea of countless corporate initia- 
tives, risk management and business conti- 
nuity management are just items on a long 
list of things to do," Murphy says. "Internal 
competition is just as real as your com- 
pany's external competition because you 
are essentially fighting for internal market 
share. You are in competition to justify the 
value you bring to the organization." 

Also, while it might be tempting to seek 
outside help to nail down the readiness pro- 
cess, Searle says it's best to keep oversight 
and management of the services necessary to 
recover business operations in-house, rather 
than handing them over to a third party. This 
control is essential, even if the many con- 
cepts and methodologies surrounding effec- 
tive readiness seem overwhelming — and if 
they do, step back and look at the process 
from a simpler standpoint. 

For example, Rhonda Morgan, vice 
president of Atcom Business Technology 
Solutions (www.atcombts.com), suggests 
the following outline as a basic process: 
interview key employees, have a written 
plan, implement your plan, and test your 
plan before there's a disaster. It's also a 
good idea to keep communications high 
on your list of priorities, because commu- 
nication will help to carry an organization 
throughout even the toughest emergencies. 

Document all key telephone numbers asso- 
ciated with your company, Morgan says. 
"Rerouting of these numbers may be neces- 
sary, and carriers can reroute these numbers 
with a phone call or even through a Web log- 
in. Having identified beforehand what you 
want to have happen with the numbers will 
save you time. In addition, many companies 
are deciding to locate a redundant controller 
in a data center or NOC in order to have IP 



telephones resilient to a backup controller in 
order to minimize downtime." 

Tools Of The Trade 

Using technology to boost your disaster 
readiness is always an option, and Meikle 
recommends using online training tools 
that incorporate video and review ques- 
tions to help drive home disaster recov- 
ery concepts. He also points to automated 
communications tools that can provide a 
streamlined process for notifying appro- 
priate people in specific situations, as well 
as industry-specific templates and method- 
ologies, similar to Murphy's advice. 

The temptation for a quick fix for boost- 
ing disaster readiness can be big, particularly 
when disaster strikes other areas. However, 
Murphy warns against traveling the path of 
least resistance by buying tools, programs, 
or other products in an attempt to "purchase" 
preparedness. Instead, look at your current 
environment and infrastructure and identify 
potential areas for improvement. 

"Technology and widgets are important, 
but we need to realize there is no magic 
product. Therefore, we always encourage 
companies to use the tools and resources 
they already have, as much as possible, and 
find creative ways to maximize their com- 
munication and database capabilities. We 
recommend building IT resiliency into the 
design from the beginning. The less 'recov- 
ery' that's needed, the better," Murphy says. 

Pay To Prepare 

The costs for boosting disaster readiness 
can vary depending on the size of the organi- 
zation, but in general, businesses can expect 
to spend money on training and orientation. 
However, smaller businesses might be able 
to cut costs by performing some of these 
tasks themselves. For example, Searle says 
that smaller business might be able to cross- 
train staff on functions such as invoicing 
customers both on computer and manually, 
and larger organizations might have to spend 
on training of critical workers, quarterly sce- 
nario tests and exercises, and emergency 
supplies for each floor of the building. 



TOP TIPS 



For a business, surviving a disaster is a dicey 
proposition witliout proper planning. Knowing 
wliere to focus your efforts can be tougin, but 
Sean IVIurpliy, president and CEO of Lootok 
(www.lootok.com), says that every company 
should have the following capabilities. 

• An intranet site or Internet portal that can 
serve as a community one-stop shop 

for information and knowledge sharing, 
company-specific case studies, train- 
ing modules, document repository, and 
workflow management. 

• An incident and communication tool that 
pushes and pulls intelligence to provide 
active support and guidance to leadership. 

• A planning tool that ensures synchroni- 
zation, integration, and coordination of 
actual recovery. 
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STORAGE 



Archiving & Storage 
In The Healthcare Field 

IT Managers Following HIPAA & HITECH Face Complex Issues 



by Jean Thilmany 
• • • 

In part because of HIPAA and 
the HITECH Act, the implications of 
archiving and retaining electronic medical 
records is a critical issue for healthcare- 
related businesses storing potentially thou- 
sands of unknown legacy records. 

But storing all patient health records 
requires huge amounts of backup and 
storage resources. So how can data 
center managers in the healthcare field 
search, extract, and purge information 
in a defensible manner rather than just 
storing and ignoring it? 



They really can't, says David Finn, 
health IT officer for Symantec (www 
.symantec.com). IT will need to keep all 
patient records to ensure compliance with 
the acts, he says. 

The news gets worse. "When it comes 
to compliance, every state will have their 
own rules, and even within states there 
are conflicting rules about what should be 
kept and for how long," Finn says. And 
not many — if any — of the electronic medi- 
cal record keeping technologies out there 
have archiving features that can help IT 
departments sort, store, and purge records 
long-term, he adds. 

"So many hospitals bring in EMR 
thinking that's going to solve their 
archival programs, but not only doesn't 
it really resolve it, in some ways it exac- 
erbates it," he says. "If those records 
are sitting in file cabinets in the doc- 
tor's office, you'll have to deal with it at 
some point, but put them on a server that 
a doctor never sees and no one has to do 
anything about it. The problem of stor- 
age falls to the IT department." 

What To Keep 

rr departments within the healthcare indus- 
try do have some recourse, says Jim McGann, 



vice president of information discovery at 
Index Engines (www.indexengines.com). To 
begin, the department should have a policy in 
place that spells out what should and should 
not be kept. Patient records will obviously 
need to be retained, but ancillary paperwork 
such as appointment schedules could possibly 
be deleted on a regular basis, McGann says. 

Next, automate the policy so records 
are automatically retained while informa- 
tion to be purged is done so on a regular 
schedule. "Some of the regulations will 
change, too," he says. "So you've got to 
have a policy that will be flexible. If there 
are new government regulations that come 



out, you'll need an engine that will be able 
to change what needs to be retained and 
purged quickly." 

For most healthcare IT departments, the 
enormous amount of patient records that 
will need to be stored can be placed on 
some kind of tape or other storage system 
and stored off site, McGann says. "Then, 
suddenly you've got an archive," he says. 

The trick comes when doctors or lawyers 
need information from that perhaps haphaz- 
ard archival system of stored records. IT 
departments will need to ensure they have 
a way to quickly and effectively electroni- 
cally search these stored records. 

McGann suggests an indexing system. 
Indexing both the archive and the records 
and information currently in use can be done 
via third-party software that uses an auto- 
mated process to scan backup tapes and other 
backed-up information as well as all informa- 
tion currently in use. Users can then type a 
keyword or phrase into the indexing software, 
just as they would within a search engine, and 
have pertinent information retumed, even if it 
only exists on a backup tape, McGann says. 

Encryption Needed 

IT managers must remember that archi- 
val information needs to be encrypted and 



secured in accordance with requirements 
laid out in the HITECH Act, specifical- 
ly in the meaningful use provision, says 
Bob Canning, customer solutions engi- 
neer at NEX Computing Solutions (www 
.nexedge.com). But confusion centers 
around the term meaningful use and what, 
exactly, it means for records retention and 
for records encryption, he says. 

IT managers should ensure that 
health records, whether archived or 
in current use, are encrypted in accor- 
dance with the meaningful use lan- 
guage. "The rules have really changed 
for IT with these acts, and it can 



Key Points 



• HIPAA and HITECH Act requirennents 
vary fronn state to state, nnaking connpli- 
ance a headache. 

• For IT, knowing which healthcare records 
to purge and which to keep, as called for 
under HIPAA, nnay not be clear. Archived 
records — and those currently in use — 
should be searchable. 

• Healthcare providers should have a policy 
on records retention, which can be auto- 
nnated. When in doubt, do not throw it out. 



certainly be challenging for them to 
keep up," Canning says. 

Because so much confusion still exists 
about how best to archive informa- 
tion in the light of HIPAA and HITECH, 
Symantec's Finn says IT managers should 
take their marching orders from the medi- 
cal records department when it comes to 
maintaining and purging records. 

Consulting the American Health Infor- 
mation Management Association, which 
works to ensure healthcare providers are 
in compliance with the acts, can also be of 
help to IT managers, he adds. 

"I would argue that whether to purge 
old information or not isn't really an 
IT issue but more of a medical records 
and legal issue," he says. "You get into 
server storage and access issues over 
time, and it gets into problems for IT, 
but unfortunately they aren't really the 
decision maker on this." □ 



Indexing both the archive and the records and information 
currently in use can be done via third-party software, which uses 
an automated process to scan backup tapes and other backed- 
up information as well as all information currently in use. 



WeBuyUsedTape.net 

We pay top dollar for 
your new and used tapes. 

• 35 years experience; 20 years same facility 

• DoD, HIPAA, and SOX-approved processes 

• References available— all industries 



We make it easy: 

• Submit your list of media: online, email, or fax 

• Receive a confidential offer within 24 hours 

• Documentation and shipping arrangements prepared 

• Tapes received and verified at our secure facility 

• Data eradicated using safe and approved processes 

• Receive payment and Data Destruction Certificate 

Contact us now! Free Shipping and Fast Pay! j 
(800) 821 -1 782 www.WeBuyUsedTape.net 



Storing Images & Large Records 

Medical images are also part of patient records, and they can cause further headaches for 
IT managers because file size is so large, says David Finn, health IT officer for Symantec 
(www.symantec.com). 

"A big issue is that only a fairly small amount of data included within the records can be com- 
pressed," he says. "More people are doing studies that include images, too, and keeping them 
longer within the system." 

Finn does have somewhat encouraging news when it comes to finding ways to store those huge 
records. "We're getting close to the time someone will have to start resolving it. I think EMR pro- 
viders are going to have to figure out ways to archive large amounts of records and how they can 
then be easily accessed through the application." 
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MESSAGING & TELEPHONY 



Implementing UC On A Budget 



Consider A System That Can Grow With Your Company 



by Sue Marquette Poremba 
• • • 

UC (unified communications) is an 

intriguing concept for many small busi- 
nesses. UC integrates real-time commu- 
nications such as instant messaging and 
videoconferencing with non-real-time 
communication services like email. The 
features and capabilities of UC have a 
lot to offer small businesses, but it costs 
money to bring the different communica- 
tion options into one integrated package. 

UC should be about delivering a main- 
stream product set that is easy for organi- 
zations to deploy and scale, says Michael 
Helmbrecht, vice president of product 
marketing at LifeSize Communications 
(www.lifesize.com), a division of Logi- 
tech. "The goal is to let as many people 
around the world connect via the technol- 
ogy," he says. "So, UC is about enabling 
people to build as large a network as they 
can but [one] that is also simple and intui- 
tive to deploy." 

Implementation Considerations 

However, for small businesses that are 
already working with a tight budget, moving 



Key Points 



UC should be about delivering a nnain- 
streann product set that is easy for 
organizations to deploy and scale. 

Knowing what connnnunication issues 
are being solved will provide a base for 
the UC integration. 

The basic features to consider for UC 
integration include videoconferencing, 
VoIP, instant nnessaging, and ennail. 



to UC may seem like a dream for the future. 
Not so, say UC experts. Any small business 
can create UC that not only fits into its budget 
now, but also can grow with the company. 

One of the first steps when planning to 
implement UC is to consider where the 
business is in its life cycle. "Has the busi- 
ness reached the point where the com- 
pany isn't going to grow much beyond 
where it is today?" Farzin Arsanjani, 
president at HyperOffice, asks. "Or is the 
company in a start-up mode and it fully 
anticipates going through growth spurts?" 
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Knowing where it is within its life cycle 
will help the business plan for scalability 
of the UC solution. 
I Also, the business should look into how 
it will integrate the UC solution. "In other 
words, it is easy to think 'I need to have a 
videoconference with my team,' but it takes 
a little more discipline to think, 'After I have 
that conversation, I need to store that infor- 
mation somewhere.' Once the company fig- 
ures out the applications it'll need, it has to 
decide how integrated the applications are," 
says Arsanjani. Applications can include 
technologies such as chat, videoconferenc- 
ing, email, and wikis. 

Don't forget about the technical abili- 
ties and physical location of employees, 
Arsanjani adds. "You may start with a few 
employees who [have the] same technical 
skills ... in the same location, and they can 
help each other adopt the UC technologies. 
But what happens if you open a branch in 
another, more distant location? You want 
the new employees to easily adopt the UC 
technology. The more integrated the technol- 
ogy is, the easier it is for people to learn, and 
[the] more productive they will be." 

Small businesses often don't have the 
resources to go out and fully research the 
different options available to them, Arsanjani 
adds. It is important they do their homework 
on UC solutions so they can run with it when 
they can implement the technology. 



Eric Loyd, president and CTO of Bit- 
netix (www.bitnetix.com), has implemented 
UC at his small business, using the tele- 
phone as the basis of his UC. The phones 
are linked into the ticketing system for proj- 
ects, and voicemail messages are sent as 
email attachments. 

Loyd recommends starting small and 
adding more as needed. "Start with a plan 
and build around some form of communi- 
cation. Once you have a platform, it is easy 
to integrate." 

Components & Features Are Key 

One mistake companies will make when 
purchasing a UC system is compromising 
on quality because they get blinded by a 
good price. Helmbrecht explains that some 
companies will buy the cheapest systems 
they can find, but the components are dif- 
ficult to use or their quality is bad and no 
one wants to use them. 

Helmbrecht believes businesses need to 
remember three things when considering UC 
integration: quality, ease of use, and an open 
architecture that can be used with cross plat- 
forms. As a small business, he says you 
don't know where you are going to go, so 
you want equipment you know can work 
with multiple platforms. 

The basic features to consider for UC inte- 
gration include videoconferencing, VoIP, 
instant messaging, and email. "You can then 



"The goal is to let as many people 
around the world connect via 
the technology. So, UC is about 
enabling people to build as large a 
network as they can but [one] that is 
also simple and intuitive to deploy." 

-LifeSize Communications' Miciiaei HeimbreM 



What Do You Want To Accomplish? 

When considering UC, it is important that 
decision makers understand what their busi- 
ness wants to accomplish with this technol- 
ogy. For example, does the company want 
to conduct more business over video rather 
than by only voice communications? 

"It comes down to the type of business 
you run and the objectives you have," 
Helmbrecht says. "But you also want to 
think of how UC can improve the way you 
engage your clients." When planning to 
budget for UC, Helmbrecht explains that 
small-business owners should consider 
how much they can save by utilizing UC's 
videoconferencing components instead of 
investing in time and travel for face-to- 
face meetings. 

"You don't need to start big," he 
says. "You can start with a couple small 
appliance-based systems, some Web 
cams, and desktop software." 



complement those features with tools such 
as calendar sharing, document management, 
wilds, and storage," says Arsanjani. 

UC has a lot of promise for improving 
productivity, and small businesses should 
think seriously about working it into their 
budgets, even if for just the basic features, 
Arsanjani adds. "It is one of those tech- 
nologies that when deployed properly, it 
will provide a return on the investment." ^ 

Look At The Options 

With all the different options available for UC, 
it can quickly become an expensive proposi- 
tion for small businesses. Consider starting 
with a free or low-cost option so your employ- 
ees can learn what they need to make the 
business run and identify where they should 
upgrade. "Bottom line, companies need to 
understand what UC is and why they need it," 
says Eric Loyd, president and CTO of Bitnetix. 
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SERVERS 



BUYING GUIDE 



Buying Tips: 




Rackmount 
Servers 



by Joanna Clay 

Get ready to gear up for an inves- 
tigation, because purchasing a rack- 
mount server requires some serious 
shopping strategy. Prior to your search, 
it's wise to assess the unique tiers of 
your business, so you know the require- 
ments of different departments, includ- 
ing IT services, in-house end users, and 
mobile workers. 

Jon Blaha, Dell sales broker for World 
Data Products (www.wdpi.com), says 
there are several considerations serv- 
er buyers must keep in mind, namely 
budgeting, knowing your infrastructure, 
and comparing brands. Most importantly, 
Blaha says, buyers need to look for the 
most bang for the buck. 

Build for your budget. As a buyer, 
you need to ask yourself several ques- 
tions regarding the number of employees 
you support, the type of software you 
need to run, how fast the server needs to 
process data, and how much drive space 
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you're really going to need. A consul- 
tant can also help you determine what is 
going to be best for your enterprise. 

Problem-solving. What type of story 
problem describes your company? Do 
you already have a lot of data storage 
but need to repurpose it? Do you need 
to attach additional backup to your com- 
plete system? Or do you require a new 
level of maintenance and support that 
comes with a rackmount server upgrade? 
In essence, you need to decide which 
problem is worth solving. Calculate how 
much storage space your desktop sys- 
tems occupy and then divide that 
number by the amount of time 
it took to accumulate that data. 
This is a helpful way to deter- 
mine how much data you pro- 
duce monthly. 

Infrastructure capabili- 
ties. A smart buyer will do her 
research to determine which 
products will best fit within the 
infrastructure; metaphorically 
speaking, smart buyers observe 
the front of the puzzle box 
before assembling the puzzle. 
"For example, [if] a client is 
trying to do VMware (server 
virtualization), it's important 
that they find out what prod- 
ucts will and have been good 
to support such a complex 
application," Blaha says. 

Brand before the buck. 
Reliability will get you far in 
the rackmount server mar- 
ket, and there's no reason 



Key Terms 



Configuration. Refers to a server's spe- 
cific setup (CPU, RAM, PCI-E cards, etc.) 

Integrated devices. Servers come 
with many devices and features built 
in, including SATA storage, IPMI, and 
network controllers. 

Regulatory and certification compli- 
ance. Hardware must meet certain rele- 
vant laws and regulations, and rackmount 
servers are no exception. Certifications 
such as RoHS power compliance can 
come into play. 

Scalability. Rackmount servers with 
scalable features allow for increasing 
amounts of data and will support addi- 
tional resources. A scalable server typi- 
cally has greater longevity. 



not to be picky about your investment. 
Compare popular rackmount vendor 
brands and don't be afraid to scrutinize 
the quality. "Almost all brands out there 
offer a similar type of performance. 
However, what makes the biggest differ- 
ence is dependability," Blaha says. 
"Think of it like buying a car. All [of 
them] do just about the same thing, but 
they all have different upkeep or repair 
needs. Always remember that no matter 
what type or brand you buy, it will 
always lose value and it will break down 
no matter what brand." 



FEATURED PRODUCT 



Expanding The Chassis 

Chenbro 6G Expanders Offer Flexibility 



by Seth Colaner 
• • • 

Chenbro's long tenure as an innova- 
tor in chassis design, beginning with the 
first tower PC in the 1980s and the first 
removable motherboard tray in the 1990s, 
is driven by the company's dedication to 
research and development. Headquartered 
in Taiwan and Taipei, Chenbro's pres- 
ence is global, with subsidiaries in 
Beijing, the UK, the Netherlands, and the 
United States. 

The company continues its strong tra- 
dition in product development with the 
capabilities available in its latest line of 
6G Expanders. 

The Expander Solutions 

The Chenbro 6G Expanders are built 
to be reliable and flexible, plus they're 

Chenbro 6G Expanders 



A reliable, flexible line of products designed to 
ensure compatibility. A number of features, including 
LSI controllers and SCSI Enclosure Services, offer 
enhanced capabilities. 

(909) 947-3200 
www.chenbro.com 

CH^BRO 



designed to help ensure compatibility. 
They have plenty of features to rein- 
force that reputation. 

They use LSI controllers, which ensure 
better compatibility with RAID configu- 
rations, and of course the myriad setups 
afforded by the different modular possi- 
bilities contribute to the overall flexibility 
of the chassis. 

By providing SES-2 (SCSI Enclosure 
Services) for communication between 
the expanders and the HBA, users gain a 
number of important capabilities, includ- 
ing managing power state management, 
cooling devices, LED displays, indica- 
tors, individual drives, and other (non- 
SCSI) elements, as well. With SES-2, 
users will receive audible alarms in the 
case of drive, temperature, and fan fail- 
ures; the latter also provides an alert via 
an LED. 

Several tests and reports come with 
the package, too. The expanders use 
eye-diagram tests, which give users a 
clear, graphical representation of SAS 
and SATA results. There is also a PCB 
impedance test and a protocol analyz- 
er for SAS and SATA, which provide 
extensive protocol decoding, expert 
error analysis, and user support when 
decoding and viewing the recorded traf- 
fic. The performance and compatibility 
test uses a three-tier daisy chain with a 
full loading read/write cycle. 



Best of all, the expanders are 
also designed to give users the 
flexibility to customize the server 
chassis for particular projects. 

Options, Options, Options 

There are many different prod- 
ucts in Chenbro's line of expand- 
ers, so you can be assured of find- 
ing a product that suits your needs. rittl; 

The CK22803 and CK23601 ' 
are 28- and 36-port, respective- 
ly, 6Gbps SAS expander cards 
that support Windows Server 
2003/2008 and Linux. Running 
the LSI SASIIX28 (CK22803) 
and LSI SASII36 (CK23601) 
chipsets, the cards measure just 106.68 x 
195.15 mm (WxD) and require only a 4-pin 
PATA connection. Both have Ix SFF-8087 
(in), Ix SFF-8088 (in), and Ix SFF-8088 
(out) ports. The CK23601 has 6x SFF-8087 
(to backplane) ports, and the CK22803 has 
4x SFF-8087 (to backplane) ports. 

There are a number of expander back- 
planes and configurations to choose from 
to customize Chenbro's modular server 
chassis, too — particularly the RM417, 
RM418, RM235, and RM316. 

The RM417, RM418, and RM235 can 
be configured with 12 3.5-inch HDDs, 
24 2. 5 -inch drives with a daughterboard, 
and 24 3.5-inch drives via a front cage 
(RM417 and RM418 only). The RM316 



CK22803 




CK23601 



is a standalone backplane that can handle 
up to 16 3.5-inch drives with SAS and 
SATA2 support. 

All the above expander backplanes fea- 
ture Ix mini SAS-in and Ix mini SAS-out 
ports, enclosure management support via 
SES2, and SGPIO support for hard drive 
failure notification. 

The Whole Package 

The 6G Expanders add an entirely new 
dimension to Chenbro's offerings. With 
the extra ability to configure multiple 
drive options, testing and alert capabili- 
ties, and smart interface technology, the 
expanders make a good series of prod- 
ucts even better. E9 
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PRODUCT SPOTLIGHT 



Rackmount Servers 



Product I 



Aberdeen Stirling 163G 



Description 




The 1 U Stirling 163G from Aberdeen uses a GPU in 
addition to a CPU to perfornn general-purpose scien- 
tific and engineering computing tasks. Stirling 163G 
servers are designed to boost performance at 1/1 0th 
the cost and 1/20th the power consumption of the lat- 
est quad-core CPUs. 

• 1 U form factor with support for two double-width 
GPU cards 

• Configurable with Nvidia Tesia or Fermi GPUs 

• Up to 12 CPU cores (dual six-core Intel Xeon 5600 
processors) 

• Up to 192GB DDR3 memory capacity 

• Three 3.5-inch SATA drives with RAID 0, 1 , 5, and 
10 support 

• Optimized for HPC and GPU supercomputing 

Best For: High-end, high-density GPU applications 
such as those found in the medical, energy, telecom- 
munications, finance, and science industries. 

Price: Starts at $2,650 



Aberdeen Stirling 266G 




The 2U dual-node Stirling 266G GPU server from Ab- 
erdeen provides endless computational scalability for 
high-bandwidth problems such as sequencing (virus 
scanning, genomics), visual computing problems such 
as graphics, and image processing. GPU computing 
uses a CPU and GPU together in a heterogeneous 
computing model, wherein the sequential part of the 
application runs on the CPU and the computationally 
intensive part runs on the GPU. 

• 2U form factor with support for two double-width 
GPU cards 

• Configurable with Nvidia TesIa or Fermi GPU cards 

• Up to 12 CPU cores 

• Up to 192GB DDR3 memory per node 

• Six 3.5-inch SATA drives per node 

Best For: A range of graphical and computationally 
intensive applications, such as medical, energy, tele- 
communications, finance, science, and engineering. 

Price: Starts at $3,631 



AMAX ServMax HX-5801 




The high-performance ServMax HX-5801 5U eight- 
way server from AMAX features increased memory 
capacity for HPC and virtualization applications. The 
maximized PCI-E bandwidth is ideal for high-perfor- 
mance disk I/O and high-speed interconnect configu- 
rations. The ServMax HX-5801 offers high-density, 
hot-swappable drive bays and is rack-optimized for 
flexibility. Thanks to Intel's Advanced RAS (Reliability, 
Availability, and Serviceability) technology, the server 
can handle a robust infrastructure for virtualization, 
cloud computing, and data center deployments. 

• Supports eight 1567-pin Intel Xeon MP E7-8800 
series processors for up to 80 cores and 160 
threads in a single chassis 

• Two Gigabit Ethernet connections 

• Onboard six-port SATA 3Gbps controller with RAID 
0, 1 , 5, and 10 support for Windows 

• Up to 64 DIMM slots (16 slots per CPU board) 

Best For: Virtualization, cloud computing, and data 
center applications in the life sciences, engineering, 
medical, government, and financial sectors. 



PortwellCAR-4010 



Portwell's CAR-4010, a functional and modular 1 U rack- 
mount communication appliance, is based on the Intel 
C206 chipset-based platform and offers a wide range of 
CPU support. The CAR-4010 features a modular form 
factor designed to help customers maximize flexibility 
and cost savings. Customers can opt to install two PCI-E 
add-on cards or an additional Portwell Ethernet module. 
The CAR-4010 also supports IPMI 2.0 remote network 
monitoring and management. 

• Intel LGA1155 Xeon E3-1200 Series processors 
and C206 chipset 

• Dual-channel DDR3 1333/1066 memory platform, 
up to 16GB 

• Eight IGbE RJ-45 onboard ports with PCI-E 2.0 
technology 

• Two software-controlled Gen. 2 bypass segments 

• Expandable for another eight 1 GbE ports (RJ-45 or 
SFP) 



Portwell CAR-5010 



The CAR-5010 server-grade network appliance from 
Portwell features a 2U rackmount chassis, support for 
Intel Xeon 5600 series quad-core and six-core processors, 
up to 6.4GTps (gigatransfers per second) Intel Quick Path 
Interconnect Technology links between the two proces- 
sors, and Intel 5520 I/O Hub with 36 PCI Express 2.0 
lanes. The CAR-5010 provides excellent computing power 
and extensive throughput performance using PCI-E 2.0 
solutions for both IGbE and lOGbE bandwidth, all at a 
competitive price. The CAR-5010 also supports IPMI 2.0 
remote network monitoring and management. 

• Supports six- and quad-core Intel Xeon 5600 series 
processors and Intel 5520 Chipset 

• Flexible modular design with removable network, 
HDD, and expansion modules 

• Up to 26 Gigabit Ethernet ports 

• Supports 12 DDR3 ECC memory sockets 

• One PCI-E x8 or one PCI-E x4 for expansion 



Silicon Mechanics Rackform 
iServ R135 



The Rackform iServ R135 is a flexible and affordable 1U 
server from Silicon Mechanics. The R135 features the 
new Intel Xeon E3-1200 Series of processors, formerly 
codenamed "Sandy Bridge." Benefits of the Xeon E3- 
1200 Series include support for up to two 6Gbps SATA 
ports and four 3Gbps ports, enabling faster hard drive 
cache transfers and allowing solid-state drives to take full 
advantage of higher bandwidth to speed boot times and 
application load times. These CPUs also feature Intel 
TurboBoost 2.0 and HyperThreading technologies. The 
R135 is further equipped with four DDR3 DIMM slots 
and four hot-swap 2.5-inch SAS/SATA drives. 

• Four DDR3 DIMM sockets 

• Four Gigabit Ethernet adapters 

• Integrated IPMI with KVM over LAN 

• One PCI-E expansion slot 

• Four hot-swap 2.5-inch SAS/SATA drive bays 

• 80 PLUS Gold Certified power supply 



Product 



Description 



Best For: Server virtualization and network security 
solutions in enterprises and midsized businesses. 



Best For: Server virtualization and network security 
solutions in enterprises and midsized businesses. 



Best For: Cost-effective general-purpose computing 
situations, including deployments as an application 
server, email server, or Web server. 
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AMAX ServMax SX-3201 





The ServMax SX-3201 from AMAX uses 32nm Intel 
Xeon 5600 Series processors to deliver fast and 
efficient computing power. To enhance virtualization 
performance, the ServMax SX-3201 features VMDq, 
Trusted Execution Technology, Turbo Boost, and Intel 
Virtualization. The 6Gbps SAS Expander Backplane 
allows for future scalability through cascading and can 
support failover and recovery features; additionally, the 
unit features inband SES-2 enclosure management. 

• 3U rackmount chassis that supports 16 3.5-inch 
hot-swap SAS/SATA drives 

• Features 12 DDR3 DIMM slots for up to 192GB 
DDR3 memory 

• Supports RAID 0, 1 , 5, 6, 10, and 50 and features 
an onboard six-port SATA 3Gbps controller 

• IPMI 2.0 server management for virtual media over 
LAN support 

Best For: Storage, video surveillance, medical im- 
aging, digital content archiving, and video-editing 
applications. 



Oracle SPARC T3-4 Server 




Oracle's SR^RC T3-4 server is equipped with the Oracle 
Solaris operating system and delivers midrange comput- 
ing capabilities with a large memory capacity and extreme 
reliability, availability, and security. The server uses a 
highly integrated design that supports virtualization and 
consolidation of mission-critical applications. 

• Features up to four SR^RC T3 processors at 1.65GHz, 
with 16 cores per processor (up to 64 cores total) 

• Up to 512GB of memory (with 8GB DIMMs) 

• Built-in, no-cost Oracle VM Server for SPARC 
provides up to 128 isolated domains per server for 
virtualization 

• Integrated on-chip cryptographic acceleration and 
on-chip 10 Gigabit Ethernet 

• Uses Oracle Integrated Lights Out Manager 

• Housed in a dense 5U enclosure 

Best For: Enterprise consolidation and virtualiza- 
tion; organizations requiring mission-critical speed, 
security, and unmatched availability for large-scale 
enterprise applications. 



Oracle Sun Fire X4800 Server 




Oracle's powerful, expandable Sun Fire X4800 server 
is a compact, modular 5U x86 system that features 
superior performance, flexible I/O expandability, and 
dependable RAS (reliability, availability, and service- 
ability) features. 

• Four or eight Intel Xeon 7500 series processors 

• Up to 128 DIMMs with a maximum memory of 1TB 

• Hot swappable I/O, disks, cooling fans, and power 
supply units 

• Two hot-swappable Network Express modules with 
eight Gigabit Ethernet ports for high-speed con- 
nectivity 

• Oracle Integrated Lights Out Manager provides 
consistent and simplified system management 

• Superior x86 infrastructure TCO with integrated 
Oracle OS, virtualization, and support stack 

Best For: Data warehousing and consolidation; en- 
terprises looking for the ideal platform for in-memory 
databases, applications with large memory footprints, 
and enterprise technical computing workloads. 



Silicon Mechanics Storform 
nServ A513 




The Storform nServ A513 is a high-capacity, low-cost 
storage server from Silicon Mechanics. This 2U dual- 
socket server features the AMD Opteron 6100 Series 
CPU, with eight or 12 cores and low-power models as 
an option. It has 12 hot-swap SAS/SATA drive bays 
and 16 DDR3 DIMM sockets and may be combined 
with the storage management software of your choice. 
The Storform storage platform is readily expandable 
using the Silicon Mechanics Storform JBOD products. 

Two AMD Opteron 6100 Series processors 
16 DDR3 DIMM sockets 
Integrated dual-port Gigabit Ethernet adapter 
Integrated IPMI with KVM over LAN 
Six PCI-E 2.0 expansion slots 
12 hot-swap SAS/SATA drive bays 
80 PLUS Gold Certified redundant power supply 



Supermicro SuperServer® 
1017C-TF 




The 1U SuperServer® 1017C-TF performance rack- 
mount server from Supermicro features the Intel 
Xeon E3-1200 processor and 32GB of DDR3 1333/ 
1066MHz ECC unbuffered UDIMM.This SuperServer 
includes the Supermicro X9SCL-F motherboard with 
an 1155-pin LGA socket. 

• Four hot-swap 2. 5- inch SATA2 drive bays 

• Supports RAID 0, 1 , 5, and 10 

• Dual Intel Gigabit Ethernet controllers 

• IPMI 2.0 with support for virtual media over LAN 
and KVM over LAN 

• 330W Gold Level power supply 

Best For: Cloud and other virtualization needs, host- 
ing and application delivery, and database processing 
and storage. 



Supermicro SuperServer® 
5017C-LF 




Supermicro's cost-effective 1 U SuperServer® 501 7C- 
LF rackmount server supports the Intel Xeon E3-1200 
processor (up to 45WTDP) and 32GB of DDR3 1333/ 
1066MHz ECC unbuffered UDIMM.The SuperServer 
5017C-LF also features the Supermicro X9SCL-F mother- 
board with an 1155-pin LGA socket. 

• Compact and durable 11.3-inch short-depth chassis 

• Dual Intel Gigabit Ethernet controllers 

• IPMI 2.0 with support for virtual media over LAN 
and KVM over LAN 

• 200W low-power-usage power supply 

Best For: Deployment as a file server, email server, 
or Web server for small businesses. 

Contact: (408) 503-8000 I www.supermicro.com 



Best For: A building block for enterprise storage 
applications using the storage management software 
of your choice. 



Contact: (408) 503-8000 I www.supermicro.com 
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Techaisle: Almost 
9 Million Tablets 
In Use At U.S. SMBs 

A survey from research firm Techaisle found 
that 8.8 million tablet PCs are in use at small 
and medium-sized businesses in the United 
States, just over half of which were bought by 
consumers who then brought them to work 
for business use. But while tablet use for busi- 
ness is increasing, Techaisle found that a large 
percentage of SMBs are not yet taking steps to 
support or secure those tablets. 

The survey, which included 1 ,356 SMBs, found 
that 58% of small businesses have no IT policy 
for supporting tablets; about half of medium-sized 
businesses have created such a policy. Tavishi 
Agrawal, a market analyst for Techaisle, says 
security should be a major concern for business- 
es planning to implement a tablet support policy. 

"As the SMB mobility increases and employees 
continue to work from anywhere and anytime, 
the physical theft of the device itself poses a big 
security challenge," Agrawal says. 

Techaisle also found that smaller businesses 
use mostly iPads, but medium-sized 
businesses are seeing a mix of IPads 
and Android-based tablets. Ac- 
cording to Techaisle, 64% of 




SMBs adopt a single OS, but in the long term, 
Agrawal says, most businesses will be forced to 
support multiple tablet operating systems. 

"Any attempt to force single OS usage will be 
met with resistance as employees increas- 
ingly bring their own devices into the office 
environment," Agrawal says. 

The Future Of Tablets In SMBs 

According to Techaisle, about 70% of busi- 
nesses are using tablets as supplementary 
devices rather than as PC replacements. This 
is a trend that will continue, Agrawal says. 

Despite this, some larger SMBs in the survey 
expressed an interest in replacing notebooks 
with tablets. Before they do this, however, 
Agrawal recommends that businesses care- 
fully consider tablets' total cost of ownership 
and what exactly the devices will be used for. 

"Based on our research, businesses are cur- 
rently using tablets for content consumption 
instead of content creation, and content cre- 
ation is hindered by lack of keyboard, compat- 
ibility with existing applications, [and] security," 
Agrawal says. "There exists a continuum from 
smartphones to notebooks, and tablet PCs 
sit in the middle. One can easily argue that 
external keyboards and external drives can 
be added to tablet PCs; however, the overall 
cost becomes more than the cost of a typical 
notebook. More importantly, the typical ISV 
[independent software vendor] has not ported 
its applications to be compatible with tablet 
PCs, which becomes a major hindrance." 

by Kyle Harpster 



CLIENTS 



Software Management 
& Licensing 

Is It Time To Move To SaaS? 



by Sue Marquette Poremba 
• • • 

For a long time, enterprise software 
was really the only option for many 
SlVLBs. This was due to larger companies, 
with multimillion-dollar IT budgets, driv- 
ing enterprise software solutions. 

"SMBs were forced to go the route larg- 
er more successful companies were tak- 
ing, regardless of the fit, and a good deal 
of money was spent to deploy enterprise 
software solutions that didn't necessarily 
address the needs of the SMB market," 
explains Marc O'Brien, general manager 
of Bamboo Solutions. 

The traditional, on-premises software 
management also often meant the need for 
an onsite IT staff to tackle issues such as 
licensing and software upgrades, but not 
all SMEs could afford full-time IT staff. 

Today, the landscape for software 
management is changing. A growing 
number of companies are choosing to 
move from traditional, on-premises soft- 
ware management solutions to SaaS. It's 
easy to use and cost-effective. SaaS lets 



Thielens, chief architect of cloud ser- 
vices at Axway (www.axway.com). 
"Email, SharePoint, business applica- 
tions — they are all SaaS-based options 
now for enterprise software." 

Thielens says one of the most com- 
pelling aspects of SaaS is the move 
from the software purchase model to 
a subscription-based software usage 
model. He explains that large soft- 
ware purchases don't always work 
as planned when you buy software. 
"There's a lot of risk involved for the 
purchaser, and while the vendors pro- 
vide some support, they are mostly off 
the hook financially once they [sell] 
you the software," he says. 

With subscription-based software 
such as SaaS, however, the risk equa- 
tion is shared differently. As Rob 
Brown, vice president of technology 
at Corent Technology (www.corent 
tech.com), explains, "One of the fun- 
damental shifts in the business model 
that occurs when software is delivered 
as a service rather than on a disc is that 



"There's a lot of risk involved for the 
purchaser, and while the vendors 
provide some support, they are 
mostly off the hook financially once 
they [sell] you the software." 



- Axway's John Thielens 

SMEs free up funds in their IT budgets 
that may have been earmarked for tech- 
nical infrastructure, project overruns, 
and IT support costs. Maintenance and 
licensing of software goes away when 
the user moves to SaaS. In the SaaS 
model, one price encompasses what used 
to be the separate costs for software, 
upgrades, and monthly maintenance of 
software and hardware vendors. 

Benefits Of Moving To SaaS 

SaaS products can offer many benefits 
to SMEs, says O'Brien. With the SaaS 
model, businesses get access to world- 
class software solutions, and pricing 
is generally based upon a subscription 
model. "Services are scaled to match 
the level of subscriptions purchased and 
include deployment, product support, and 
updates and bug fixes," he says. "This 
means drain on IT is lessened and scal- 
ability is quick and easy." 

Flexibility is another key strength 
when considering SaaS products for 
your enterprise. Utilizing SaaS means 
you can access data from anywhere at 
any time, and your staff can work effi- 
ciently whether they are in the office, 
on the road, or at home. Additionally, 
SaaS companies take security seriously, 
which can be cost-effective in the end. 

"SaaS as an option for any IT struc- 
ture is really good policy," says John 



the onus of delivery is shifted back to 
the provider. The SaaS provider is the 
owner and operator of the solution." 

An example of this is the software 
upgrade lifecycle. SaaS vendors take 
care of all of the patching and all of 
the software maintenance, while the 
customer continues to use the program 
uninterrupted. "SMBs don't have to 
plan for a hardware refresh or a migra- 
tion to a new version," says Thielens. 
"The difficult step functions in the 
ownership costs of traditional on-prem- 
ises software get smoothed away in the 
subscription agreement." 

Moving from the traditional soft- 
ware management model to SaaS is 
a major step, because it changes the 
way business thinks about computing. 
Yet, SMEs have embraced SaaS, and 

A Hybrid Alternative 

Sometimes an enterprise will find being in a 
SaaS agreement makes sense for the overall 
business, but there are situations when the 
software needs to be controlled from within the 
company. If this is the case, John Thielens, 
chief architect of cloud services at Axway 
(www.axway.com), says it makes sense to con- 
sider going hybrid and keeping some things in 
the cloud and some things in-house, based on 
the regulatory mandates the company is under. 



Key Points 



SaaS gives an enterprise the ability to free 
up IT budgets that have large sums of 
money set aside for technical infrastructure, 
project overruns, and IT support costs. 

Flexibility is another key strength when con- 
sidering SaaS products for your SMB. Users 
can access data from anywhere at any time 

SMEs have embraced SaaS, primarily 
because they tend to be more agile, more 
adaptable, and more responsive to new 
ideas and change. 



as O'Brien says, they are embracing 
SaaS products with open arms. Industry 
experts aren't surprised. SMEs tend 
to be more agile, more adaptable, and 
more responsive to new ideas and 
change than large enterprises. Whereas 
a large enterprise may not even con- 
sider SaaS, because it already has an 
impressive IT operation and plenty of 
bureaucratic issues to deal with, an 
SME can often reinvent itself more 
quickly and can absorb new paradigms 
more rapidly. 

I Even though SaaS seems like a great 
idea, especially for the budget-strapped 
enterprise that is in need of a good soft- 

I ware solution, it isn't going to be the 
right solution in every situation. Dan 
Pellegrini, director of SaaS at Logicalis 
(www.logicalis.com), suggests enter- 
prises map out exactly what their needs 
are that will be filled by switching to 
SaaS. They also need to consider secu- 
rity and confidentiality issues. There 
will be situations when SaaS may not 
be the best solution for sensitive data. 

Things To Consider 

When it comes time to choose a SaaS 
provider, Pellegrini says an SMB should 
consider whether it can live with hav- 
ing software solutions delivered via the 
Internet. "There are certain applications that 
aren't well delivered through the Internet 
for a number of reasons," Pellegrini says. 
"You have to consider the user experience 
and needs." 

Then you need to look at the background 
and history of the SaaS provider your com- 
pany is considering. Look into the provid- 
er's SaaS track record and find out if it is 
reputable. How long has the vendor been in 
business and what services does it provide? 
Inquire about SLAs and what kind of mon- 
etary penalties come with it. 

You also want to know what the SaaS 
I infrastructure looks like and who is man- 
aging it. And what does security look like? 
"Software companies are good at deliver- 
ing software, they aren't as good at devel- 
oping a SaaS model," Pellegrini adds. 

"At the end of the day, SaaS is not 
about 'we can do it better than you,'" says 
Pellegrini. "Instead, we're going to keep 
or improve the quality of service for you, 
but we're going to be less expensive. And 
that's really what SaaS is all about — giv- 
ing you a predictable cost for what is typi- 
cally an unpredictable environment." P 
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Build An IT Team 

Hiring From Tfie Ground Up 



by Sue Hildreth 
• • • 

If you had to start a new IT depart- 
ment from scratch, where would you 
begin? Which skills would you look for 
first, and how can you ensure that the peo- 
ple you hire will be effective teammates? 
Whether hiring a whole new IT depart- 
ment or starting a new IT group within the 
company, recruiting effective employees 
involves more than just checking off a list 
of skill requirements. 



Key Points 



• Creativity is an innportant characteristic in 
developers and otiier IT professionals. 

• Don't be tied to a low salary range, as 
Sonne IT professionals are worth the 
extra nnoney. 

• Consider a candidate's social skills, which 
can nnake IT teanns work together better. 



Although experience, degrees, and certifi- 
cations are, of course, extremely important, 
specific technical skills aren't the only, or 
even primary, factor in a good IT hire. The 
IT manager also has to consider less tangible 
elements such as the potential employee's 
motivation, career goals, and social skills. 



have the most good ideas and are adept at 
writing good code," says Hammond. "If 
you're willing to pay top talent twice as 
much as the average salary, but you get 
five or six times the work out of them, you 
come out ahead." 

One indication that a profession- 
al possesses an innovative and self- 
directed personality is that he spends 
some portion of his free time doing 
coding or other hands-on IT work, says 
Hammond. It may be for a volunteer 
organization, to start a new business 
in the basement, or just for fun. But it 
shows that person's interests in learn- 
ing new technologies. 

In a survey last year, Hammond asked 
developers if they wrote code outside of 
work, and 70% of them said yes. "That 
indicates those people have the ability to 
self-master new skills and are constant- 
ly learning new things on their own," 
Hammond says. 

Another good question to ask, he says, 
is how many total hours has a potential 
candidate spent doing hands-on IT work, 
such as programming, over the course of 
his school and work careers. 

"It's hours of practice that create tal- 
ented individuals, not the hours paid to do 
something. It's an easy question to ask and 
can start a fascinating conversation," says 
Hammond. Those types of conversations 



interviewing process more efficient. They 
can help filter out the obviously bad fits 
and give some insight into the candidates 
that can help make for a better interview. 

He also suggests including a few key 
interview questions, right up front, to help 
weed out the unqualified more quickly. 
People will send resumes into any job that 
looks reasonable, even if they lack some 
of the requirements. So it saves time to 
simply ask about the most critical require- 
ments right off the bat. For example, if 
the job requires ITIL (IT Infrastructure 
Library) certification, ask about it. 

What About Outsourcing? 

More companies are opting to outsource 
whole areas of their IT operations, from 
the Web site to the CRM application to the 
email server. That will obviously reduce 
some of the need for infrastructure staff 
and usually provides for a quicker startup. 
There are many reasons why an organiza- 
tion might want or need to outsource an IT 
project or use a contract employee from an 
IT staffing agency. One reason is scarcity 
of skills, says Andrew Speer, vice presi- 
dent for Technisource ( www. techni source 
.com), an IT staffing, consulting, and out- 
sourcing company. 

"From a skills complexity perspec- 
tive, things like ERP, financial ser- 
vices, [and] healthcare migration are 



"[Higher pay] is sometimes what it takes to get the most 
productive developers who have the most good ideas and 
are adept at writing good code. If you're willing to pay top 
talent twice as much as the average salary, but you get five 
or six times the work out of them, you come out ahead." 



^ -Forrester Research 's Jeffrey Hammond 

"You have to make a decision about 
what your company culture is and put 
together a team that can work together to 
produce results that are better than those 
produced by one person making all the 
decisions alone," says Evan Fort, CTO at 
HRsmart (www.hrsmart.com). 

Critical IT Character Traits 

Although honesty, a good work ethic, 
and intelligence are all traits one wants 
to see in a professional employee, for IT 
workers, success often hinges on a differ- 
ent set of traits. One key characteristic that 
Jeffrey Hammond, a Forrester Research 
analyst, considers critical in IT profession- 
als is creativity. He looks for signs that the 
person can solve difficult problems with 
out-of-the-box thinking. 

"When you're trying to build new sys- 
tems or do something you haven't done 
before, creativity becomes critical," says 
Hammond, who advises employers to con- 
sider paying more for highly talented can- 
didates (if your company doesn't offer 
higher pay, another firm — a competitor or 
an IT management firm — will probably 
recruit them instead). 

"[Higher pay] is sometimes what it takes 
to get the most productive developers who 



will also help uncover interests the person 
may have in learning a new technology or 
business skill. 

Although IT workers aren't always 
known for their social graces, an IT man- 
ager can't ignore the need for competent 
social skills, which are needed to make 
interactions with end users and non-tech- 
nical managers more pleasant and pro- 
ductive. Not all team members have to 
be good diplomats, says Fort, but a few 
should be. Assuming those people also 
have solid technical skills, they may wind 
up being your most valuable employees. 

"We have some of our best successes 
in hiring with people who have all of the 
right soft skills. They also have good gen- 
eral technical skills but maybe not every 
specific piece of technical knowledge [that 
the job involves]," says Fort. Some tech- 
nical skills are easier to acquire than is a 
good sense of humor. 

Tools To Ease The Hiring Process 

Online job boards are useful in recruit- 
ing, say experts. The general-purpose ones 
are very popular and are surprisingly use- 
ful for finding IT talent. 

Fort also suggests using candidate- 
screening tactics that can help make the 



difficult to staff and expensive if [orga- 
nizations] have to hire full time," says 
Speer. He suggests IT managers con- 
sider leasing these workers on an as- 
needed basis, which can fill the need 
without incurring a long-term overhead 
of high salaries and benefits plans. 

A related reason to outsource is to 
jump-start a project. "There are some 
companies that want to scale talent up 
really fast for important, short initia- 
tives and don't want the financial bur- 
den of a full-time IT organization," 
says Speer. 

Where To Find 
IT Talent 

According to one study, partnering with 
certifying organizations is a good method 
for finding new people. According to 
the survey, "The Emerging Workforce 
Study" by Spherion Staffing Services and 
Technisource, 30% of technology workers 
have completed certification, while 14% 
are pursuing it. 

Source: "The Emerging Workforce Study" by Spherion 
Staffing Services and Technisource. 



Help Desks Need 
Help: Most Teams 
Significantly 
Understaffed 

A new report from the IT staffing experts 
at Robert Half Technology suggests that 
most companies maintain less internal 
tech support personnel than is ideal. The 
more than 1 ,400 ClOs who responded 
to the Robert Half survey claim that tech 
support teams are short by an average 
of 42%, which leaves the few tech sup- 
port personnel they do have struggling 
to answer too many requests and end 
users having to wait longer for resolutions 
and assistance. 

The current mean ratio of general employ- 
ees to tech support employees is 11 2:1 , 
but on average, ClOs say 65:1 is the tar- 
get ratio. John Reed, executive director 
of Robert Half Technology, says that the 
ideal ratios can change depending on 
current economic conditions, individual 
hardware and software refresh cycles at 
organizations, and larger trends. "How- 
ever, having adequate technical support 




is important regardless. During hardware 
or software refresh cycles, organizations 
should consider bringing in additional 
consultants to help handle the temporary 
increase in end users requiring addition- 
al support." 

Midsized Firms Better Off 

Tech support teams at smaller firms 
aren't as well staffed as those at medium- 
sized firms, the report notes, but that's 
not because tech support is just a lower 
priority for smaller firms. "It's important 
to remember that oftentimes larger orga- 
nizations have larger budgets, which can 
translate to having a more ideal ratio of 
help desk professionals to end users," 
Reed says. 

Regardless of the size of the firm, it's 
important to keep the help desk well- 
staffed. "When an end user in an organiza- 
tion experiences technical issues, it can be 
a huge burden on productivity. The longer 
it takes to get that user up and running, 
the more productivity that's lost." 

Reed also has some advice for IT manag- 
ers faced with a less-than-ideal tech-to- 
end-user ratio. "Consider hiring additional 
staff or bringing in consultants. Additional- 
ly, be sure to keep the lines of communi- 
cation open with your help desk teams to 
ensure they're not approaching burnout. 
The last thing you want is for members 
on an already understaffed team to leave 
for other opportunities because they are 
stretched too thin." 

by Andrew Leibman 
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■ South Korea Raids Google Offices 

Police raided Google's office in Seoul on the 
suspicion that its AdMob mobile advertis- 
ing subsidiary had been illegally collecting 
smartphone users' location data without 
their consent. Google says it is cooperating 
with the investigation. In January, the Seoul 
police said that Google's Street View service 
had illegally gathered location information 
from about 600,000 South Korean wireless 
Internet users. Google, along with Apple, has 
also recently come under fire in the United 
States because of how it handles location 
and other personal user data that it collects 
using smartphone applications. 

■ IVIicrosoft To Raise 
Certification Exam Fees 

Microsoft announced that the fees for a num- 
ber of its certification programs, including the 
Microsoft Certified IT Professional, Microsoft 
Certified Application Developer, and Microsoft 
Certified Database Administrator certifica- 
tions, will be raised in July. The rate hike is not 
universal, however; rates will go unchanged 
in countries with shaky economies, such 
as Ireland and Greece, but will increase 
about $25 in the United States and Canada. 
Microsoft plans to use the extra money gar- 
nered from the increased rates to improve its 
certification programs through updates to tests 
and exam security, and the company plans to 
offer discounts and other savings to its part- 
ners and to university students. 

■ Television Ownership Drops 

According to Nielsen, the number of U.S. 
households with a television has declined for 
the first time since 1992. The previous survey 
found that 98.9% of households had a televi- 
sion, but that number has dropped slightly to 
96.7% in the most recent update, which takes 




into 
account 
the 2010 
Census data. 
Nielsen suspects 
that several factors 
have contributed to the decline, including the 
digital transition and subsequent obsoles- 
cence of analog TVs; hard economic times 
for lower-income and rural households that 
preclude TV ownership; and, to a lesser 
extent, young urbanites who have swapped 
the television for viewing online media on 
PCs and mobile devices. 

■ End Users: Oracle Has Server Agenda 

Oracle's decision to end production of the 
Itanium processor platform is part of an agen- 
da. That's the finding of a survey of enterprise 
customers conducted by Gabriel Consulting 
Group. The surveyed looked at 450 corporate 
customers, of which 94% are Oracle custom- 
ers. Among the top reasons respondents gave 
for why Oracle got rid of Itanium processors 
are answers such as "the competitive move to 
kill HP Unix and NonStop business," "justifica- 
tion to raise license/support fees for Itanium 
users," and "it's personal: they want to punish 
HP." About 65% of respondents report that 
Oracle's action has changed their opinions of 
the company for the worse. 
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Building Corporate 
Sustainability 

Being Sustainable Means More Than Just Going Green 



by Carmi Levy 

With companies in all sectors enthu- 
siastically painting themselves green to 
save money and market themselves more 
effectively, truly savvy leaders see much 
more than one simple color. Corporate 
sustainability is the ultimate extension of 
today's eco-driven wave, and as long as 
IT leaders don't feel like they're being 
dragged into it, tech shops are optimally 
positioned to drive sustainability deep into 
the organizational culture. 

"Organizations are seeking ways to cut 
power consumption costs, maintain avail- 
ability, and meet growth demands, usu- 
ally all at once," says Mike Nails, senior 
product marketing manager for enterprise 
storage systems at Hitachi Data Systems 
(www.hds.com). "An edict for the IT 
department to implement sustainable prac- 
tices might seem like just another initiative 
that further taps withering resources, but 
as enterprise organizations experience the 
squeeze on resources, so grows the appeal 
of a more sustainable data center." 

Nails defines sustainable IT as efforts 
"that increase the useful life and reduce 
environmental impacts of IT systems 
and concurrently offer cost benefits to 
the business." 

The Pressure Builds 

Stretching life span and controlling 
costs will become more critical in the 
years to come as data centers come under 
growing pressure to perform. Explosive 
growth of cloud computing, virtualization, 
and the mobile Web, among other factors, 
is pushing power and cooling to, and occa- 
sionally beyond, their theoretical break- 
ing points. Sustainability initiatives are the 



Key Points 



Sustainability extends beyond simply 
saving energy by refraining service deliv- 
ery in a more balanced manner. 

As organizations face unprecedented 
challenges in delivering increasingly 
sophisticated services to their lines of 
business, IT is challenged to keep the 
lights on while holding the line on power 
and cooling costs. 

Given sustainability's differentially large 
impact on data center operations and 
processes, IT can and should be driving 
the entire organization's push to a more 
sustainable future. 



build business cases based on energy effi- 
ciency and reduced equipment costs. 

"By executing energy-efficient measures 
to reduce the amount of equipment need- 
ed, those related energy and flooring costs 
can be reduced," Nails says. "Optimizing 
business processes and supply chains, 
transitioning to virtual travel or meeting 
software, and using newer technologies 
to compress the space necessary to store 
data are among the easiest ways to strip 
costs while reducing carbon emissions and 
greening IT." 

A Simple Conversation 

Sean Gilson, director of data cen- 
ter operations at QTS (www.qualitytech 
.com), says sustainability begins with 
communication. By publicly discussing 
their investments in efficiency and obtain- 
ing feedback, IT departments position 
themselves optimally to reap the rewards 
from sustainability initiatives. 



A Not-So-Simple Initiative 

Becoming sustainable may be easier said 
than done. Nails says the typical data cen- 
ter today may have evolved in a relatively 
uncontrolled manner over time because of 
urgent allocation requests or growth spurts. 
This results in collections of siloed or poor- 
ly utilized assets, with aging equipment — 
often covered by costly maintenance con- 
tracts — and a patchwork of management 
tools adding to the inefficient overhead. 
Faced with availability and compliance 
constraints, IT is often focused more on 
keeping its customers happy and its lights 
on than it is on becoming sustainable. 
Longer-term, the spiralling tangible and 
intangible costs of throwing resources into 
the breach will push sustainability higher 
up it's priority ladder. 

As much as a sustainability agenda opens 
new doors for IT and the businesses it 
serves, however, leaders must recognize 
that it's more than just another tech project. 
It's a fundamental shift in organizational 
priorities and culture. 

"Rethinking the data center from a sus- 
tainability perspective invites the IT leader 
to evaluate beyond application require- 
ments, performance demands, and storage 
capacity," Nails says. "The sum of the parts 
may be greater than the whole. By reviewing 
components and configurations, the organi- 
zation can better understand where ineffi- 
ciencies exist and ultimately learn how best 
to improve overall data center efficiency." 

Nails says an efficiency inventory of the 
physical IT infrastructure is a good place to 
start. It should assess power and cooling 
usage, physical security, operational proce- 
dures, storage configuration, and facility 
layout. Nails says sustainability extends 



"By reviewing components and configurations, the organization 
can better understand where inefficiencies exist and ultimately 
learn how best to improve overall data center efficiency." 



- Hitachi Data Systems' Mil<e Naiis 

only realistic means of ensuring tomor- 
row's infrastructure can handle exploding 
demand for services without melting down 
the budget — or the planet. 

"Managers need to understand that 
increasing bandwidth and capacity will 
necessitate adding more and more servers 
and related equipment," says Asif Hazarika, 
senior director of product management at 
IP Infusion (www.ipinfusion.com). "If this 
growth is not optimized, there will be a 
huge impact on the data center infrastruc- 
ture. In order to be more energy-efficient, 
we need to increase cooling efficiency and 
reduce power needs, equipment, and the 
data center footprint." 

Nails says the typical data center dou- 
bles its power consumption every five 
years to keep pace. More intelligent meth- 
ods of controlling power, cooling, and 
floor space costs will become increasingly 
crucial for planners, making it easy to 



"We're one of many organizations in 
our industry that are concerned with sus- 
tainability," Gilson says. "A key part of 
our involvement is to be part of the dia- 
logue with those most concerned with 
these important topics. It is important for 
us to communicate our resource manage- 
ment efforts to those engaged in environ- 
mental issues." 



throughout — and beyond — the organization, 
as well, and recommends engaging profes- 
sional services teams to help design sustain- 
ability-optimized infrastructure. Make sure 
such vendors offer professional services for 
eco-friendly technologies, provide for prop- 
er recycling or disposal of old or returned 
equipment, and have a track record for envi- 
ronmentally responsible practices. 



The Regulatory Reality 

Organizations may eventually have no alternative to a sustainable platform. According to the 
Intergovernmental Panel on Climate Change's Fourth Assessment Report, greenhouse gas 
emissions must be kept at about 450ppm (parts per million) to keep global temperatures from 
rising 2 degrees or higher than they were before the Industrial Revolution. The International 
Energy Agency concludes that a 50% cut in 2005-level carbon dioxide emissions by 2050 will 
stabilize global emissions at 450ppm. 

The bottom line: It's only a matter of time before governments tighten the green reins. 

Source: Hitachi Data Systems 
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USED & REFURBISHED EQUIPMENT SPOTLIGHT 



Understanding 
The Gray Market 

Smart Buyers Can Find Quality Equipment 
At Low Prices 



by Julie Knudson 
• • • 

Ask a group of IT professionals what 
the gray market is, and you're likely to get a 
variety of answers. Is it knock-off equipment 
from overseas? It is equipment with dubious 
origins? The answer to both is a vehement 
"no." The common definition of the gray 
market is "the sale of equipment through 
channels that aren't licensed or authorized 
by the original manufacturer," and it's both 
legal and legitimate. 

The stigma — and confusion — associated 
with the gray market has prompted many 
resellers to undertake an ad-hoc rebranding 
campaign. "Used market" suffices for many, 
while others prefer "green market," pointing 
to the environmental advantages of keeping 
equipment in the marketplace and reduc- 
ing landfill materials. Whatever you call it, 
the gray market offers smart buyers quality 
equipment at attractive prices. 

Reputation is king. Finding a repu- 
table reseller is critical to making the 
gray market work for you. "I would defi- 
nitely stress that buyers get references," 
says Richard Greene, vice president of 



operations at Liquid Technology (www 
.liquidtechnology.net). "Watch who you're 
dealing with, and try to go with someone 
who's been around awhile." Tap your , 
network to see which vendors offer qual- | 
ity equipment and reliable guarantees, and 
seek out resellers with a track record of 
satisfied customers. 

Before buying, consider each seller's 
history, including transaction volumes and 
customer ratings. "Have they sold a lot of 
product? It should be at least in the hundreds 
of items," Greene says. "And what's their 
feedback like? I think [checking] those two 
things should protect you fairly well." 

What to buy. For organizations ready 
to get their feet wet in the gray market, 
Tim Farrow, senior vice president of opera- 
tions at Apto Solutions (www.aptosolutions 
.com), recommends data communications ' 
equipment, PCs, and servers as good choic- 
es that usually avoid the licensing issues 
encumbering other items. "With servers, 
if companies are replacing or adding on 
to their existing infrastructure and can use 
enterprise-wide licensing, it's very cost- 
effective," Farrow says. 



What to avoid. Gray market channels 
aren't good for everything. "If you need 
license upgrades or anything to operate the 
piece, you're not going to be able to do it," 
Greene says. "Storage would be one of the 
best examples because there's often some 
kind of complex software running for inte- 
gration." Claims that a reseller will trans- 
fer software registration for you, or that 
no license is needed, should be verified 
with the manufacturer before completing 
the purchase. It's also recommended that 
buyers check with the manufacturer before 
assuming any new purchase can be added 
to an existing service contract. 



Still on the fence? If you're unsure 
about taking the gray market plunge, con- 
sider the benefits: Good-quality equip- 
ment is regularly available on the gray 
market, and some components have never 
seen the light of day. Companies that 
have downsized or gone out of business 
often leave pristine equipment avail- 
able for resale. "There's a lot of new, 
perfectly good product to be bought up 
and resold when those deals come up," 
Farrow says. 

Even when items are used, Greene says 
that shouldn't dissuade buyers. "It's not a 
lesser good; it's just a used good." 



Find Used & Refurbished Equipment 

For Sale 

Once you've nnade the decision to purcliase used or refurbished equipnnent, finding the equipnnent 
you need is easy with Processofs online Data Center Products For Sale Database. 



Fronn Processor's honne page (www.processor.conn), you can search for a specific part nunnber, 
nnake, nnodel, or description. Enter the infornnation in the 
appropriate box and click Search. You'll see a list of available 
equipnnent. If you don't see the particular piece you're looking for, 
scroll to the bottom of the search results page to conduct a more 
detailed search. There, you can search by part number, model, 
price, location, and more. 

Don't know the specific part number or model? Use 
the drill-down search on the Processor home page 
to view results from specific manufacturers. Simply 
click the manufacturer name, and you'll see a list of 
all equipment listings from that manufacturer. 




dbg 



DEC-Compaq-Cisco-Sun-SGI 



770-931-7732 

Fax 770-931-9416 

www.dbgweb.com 
salesp@dbgweb.com 



AlphaServer GS160 Model 16 

Base System for OpenVMS 

• DY-160CG-AA 

• One Alpha 21264 Processor 1224 MHz 

• Four Quad Building Blocks 

• One 14-Slot PCI Shelf 

• OpenVMS Operating System License 

ALSO AVAILABLE: 

• Additional 1224 MHz CPU w/SMP 

• Additional Memory 

• Additional PCI Shelves 

• Additional PCI Options 



2 Systems In Stock! 



Authorized COflfPAQ. Reseller 

WE WILL BUY YOUR USED HARDWARE! 




Pegasus Buys, Sells and Offers Depot Maintenance 
& Flat Rate Repair On: 

Kronos Time Clocks, Flat Panels, 
POS & Symbol, HHP, PSC, Telxon, 
Metrologic, Barcoding Equip 



We can supply any configuraton you 
need. If you have clocks installed and 
need a specific KOS version we can 
help you. Same is true on I/O Boards. 

Specialize in 420G, 440B, 
460F, 480F, 551, and 4500's 



Ethernet Daughter Board, Modem Option, M 

Remote Readers, Bell Relays, Master Sync, ^ 

Battery Backup Kit, Dual Reader, I/O Board, | 
External Reader I/O Board, Touch ID 




Pegasus Computer Marketing, Inc. 

(800) 856-2111 I www.pegasuscomputer.net 



Thanks to DMD, we 
don't have to sit on 
our old computer 
equipnnent anymore. 



retrieve furbish - reuse ■ recycle ■ remarket 
We Purchase: We Offer: 



Co m p u te rs/La pto ps 
Networking Equipment 
Power/Environmental 
Telecommunications 
Complete Data Centers 
Printers 



Asset Tracking/Reporting 
Deinstallation/PackingyTransportation 
DOD Level Data Destruction 
Epa Recycling/Reuse 
Ongoing Support Plans 
Technology Refresh/Install Programs 



At DMD Systems Recovery, we remove the headache from asset 
disposal. We can manage the whole process from deinstallation to 
asset remarketing. We worry about data destruction, EPA 
regulations, logistics, and insurance so that you don't have too. 
Don't tie up your resources or take chances with you data or 
environmental issues. Call DMD today. 



DMD SYSTEMS Recovery, imc. 

A Slijhilf Dtlf«r»n1 Campanif™ 
Tall |H77)7rj'-DeA1 PIIQnil: {SB2}3IIT-D1BO Fax: (H0l?)3e7-DfS1 

I Inlornal: wbw.dmits^fstintt cam 



Magnext Ltd 

7099 Huntley Rd, Suite 104 1 
Columbus, OH 43229 DATA BACKUP SOLUTIONS 



MAGNEOT 



NEW & REFURBISHED AUTOLOADERS & TAPE LIBRARIES 
UPGRADE PACKAGES FOR HIGHER PERFORMANCE & CAPACITY 
TAPE LIBRARY REPAIR SPECIALISTS - STOCK lOOO'S OF PARTS 



y^(i^^©[i mm mmm 



LTO • DLT • SDLT 
9840 • 9940 • TIOK 

Magnext stocks tape drive 
modules for your tape library 

Call for best pricing! 

Committed to providing high-value, high-quality, products to the IT marketplace 



'^Toll-free 


888-NOW-TAPE | 


614-433-0011^ 


^www.ma^ 


jnext.conn 


info@magnext.com^ 



Do you have 
excess equipment? 



Post it for sale on Processor.com! 

Ifs as easy as: 

1 . On the Processor.com home page, 

click Used/Refurbished Equipment. 




2. Choose 
Post A Free 
For-Sale Listing. 



Used/New/Refurbished Equipment 



• Search For-Sale Listings 

• Find Vendors 

• Post A Free Want-To-Buv 



3 . Follow the on-screen directions from there! 



(800)247-4880 | www.Processor.com 



CASH IN 

YOUR USED 
CELLPHONES 




& pacebutler.com will 
pay you up to 

^ I ^ o\ir ^I-fe Moiv! 



$125 



for each phone! 



We issue your check within 4 days! 
www.pacebutlencom Pa ce fSfnH^ .^ 

1 -800-248-5360 corporation ^ 

Some phones hove no volue. See current purchase price list for individual mode! prices at www.pacebutlerxom 
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Upcoming IT Events 



Network With Your Peers 
At These IT Training & Association Meetings 

Across The United States 



MAY 

Configuring identity & Access 
Solutions with Windows Server 
2008 Active Directory 

May 23, 6 p.m. 
Online Live 
www.nhnortliflorida.com 



Vl\/lware vSpliere: Install, 
Configure, IVIanage v 4.1 

IVlay 23, 8 a.m. 
Platform Labs 
1275 Kinnear Road 

Columbus, Ohio 
www.platformlab.org 



AITP Akron-Windows Piione 7 

May 24 
Buffalo Wild Wings 
5050 Eastpointe Drive 
Medina, Ohio 
www.akron-aitp.org/index.htm 



Green Data Center Conference 

May 24-26 
Marines' Memorial Club & Hotel 
San Francisco, Calif, 
www.greendatacenter 
conference.com 



AITP St. Louis 

May 26, 5:30 p.m. 
Crowne Plaza Clayton 
7750 Carondelet Ave. 
St. Louis, Mo. 
stlouisaitp.org 



ISSA Metro Atlanta 

May 26, 6:30 p.m. 
SecureWorks 
One Concourse Parkway NE 
5th Floor 
Atlanta, Ga. 
www.gaissa.org 



JUNE 



Cincinnati Programmers Guild 

June 2, 6:30 to 8:30 p.m. 
Max Technical Training 
4900 Parkway Drive, Suite 160 
Mason, Ohio 
www.maxtrain.eom//pages 
.aspx?pagename=ITAssociations 



Data Connectors Tampa 
Tech-Security Conference 

June 2 

Crowne Plaza Hotel Tampa 
Westshore 
5303 W. Kennedy Blvd. 
Tampa, Fla. 
www.dataconnectors.com 
/events/201 1 /06Tampa/inv_ex.asp 



SharePoint User Group 

June 2, 6 to 8 p.m. 
Max Technical Training 
4900 Parkway Drive 
Suite 160 
Mason, Ohio 
www.maxtrain.eom//pages 
.aspx?pagename=ITAssociations 



Central Plains ISSA 

June 3, 1 p.m. 
Wichita Marriott Restaurant 
9100 E. Corporate Hills Drive 

Wichita, Kan. 
issa-cp.org 



Fundamentals 
Of l\/licrosoft Server 2008 
Active Directory 

June 6-9, 6 p.m. 
Online Live 
www.nhnorthflorida.com 

Agile Product 
Leadership Network 

June 9, 6 to 8 p.m. 
Max Technical Training 
4900 Parkway Drive 
Suite 160 
Mason, Ohio 
www.maxtrain.eom//pages 
.aspx?pagename=ITAssociations 



AITP Research 
Triangle Parl< 

June 9 
University Club 
4200 Hillsboro St. 

Raleigh, N.C. 
www.rtp-aitp.org 

Cincy SQL 

June 9, 6 to 8 p.m. 
Max Technical Training 
4900 Parkway Drive 
Suite 160 
Mason, Ohio 
www.maxtrain.eom//pages 
.aspx?pagename=ITAssociations 



Data Connectors Baltimore 
Tech-Security Conference 

June 9 
TheTremont Grand 
225 N.Charles St. 
Baltimore, Md. 
www.dataconnectors.com 
/events/201 1/06Baltimore 
/agenda.asp 



7x24 Exchange 
Spring Conference 

June 12-15 
Hilton Orlando Bonnet Creek 
Orlando, Fla. 
www.7x24exchange.org 



The Business Of 
Cloud Computing 

June 13-15 
Hyatt Regency Mission Bay 
Spa & Marina 
1441 Quivira Road 
San Diego, Calif. 
http://tinyurl.com 
/CloudComputing613 



Gartner IT Infrastructure, 
Operations, and l\/lanagement 
Summit 

June 13-15 
The Peabody Orlando 
9801 International Drive 
Orlando, Fla. 
www.gartner.com/technology 
/summits/na/it-operations/ 



Implementing & l\/lanaging 
Windows Server 2008 
Hyper-V 

June 13-16, 6 p.m. 
Online Live 
www.nhnorthflorida.com 



AFCOM Central Texas 

June 16, 11 :30 a.m. to 1 :30 p.m. 
Marie Calender's Restaurant 
9503 Research Blvd. 
Austin, Texas 
www.afcom.com/afcomnew 
/CentralTexas.HTML 



CinARC Software Architects 

June 16, 6 to 8:30 p.m. 
Max Technical Training 
4900 Parkway Drive 
Suite 160 
Mason, Ohio 
www.maxtrain.eom//pages 
.aspx?pagename=ITAssociations 



ISSA Northern Virginia 

June 16, 5:30 p.m. 
issa-nova.org 



AITP Region 18 Spring 
IT Conference 

June 18, 8 a.m. to 5 p.m. 
Holiday Inn-Akron West 
4073 Medina Road 
Akron, Ohio 
www.aitp-region18.org/ITCon/ 

Data Connectors Charlotte 
Tech-Security Conference 

June 16 
Renaissance Charlotte 
Suites Hotel 
2800 Coliseum Centre Drive 
Charlotte, N.C. 
www.dataconnectors.com 
/events/201 1/06Charlotte 
/agenda.asp 



Installing & Configuring 
Windows 7 Client 

June 20-24, 6 p.m. 
Online Live 
www.nhnorthflorida.com 



AITP Oklahoma City 

June 21 
aitpokc.org 



AFCOI\/l Central Texas 

June 23, 11 :30 a.m. to 1 :30 p.m. 
Marie Callender's Restaurant 
9503 Research Blvd. 
Austin, Texas 
www.afcom.com/afcomnew 
/CentralTexas.HTML 



AITP Akron-Power Shell 

June 28 
Buffalo Wild Wings 
5050 Eastpointe Drive 
Medina, Ohio 
www.akron-aitp.org/index.htm 



Data Connectors Orange County 
Tech-Security Conference 

June 30 
Doubletree Hotel Anaheim/ 
Orange County 
Orange, Calif. 
www.dataconnectors.com 
/events/201 1/06OrangeCounty 
/agenda.asp 



JULY 



Central Plains ISSA 

July 1, 1 p.m. 
Wichita Marriott Restaurant 
9100 E. Corporate Hills Drive 

Wichita, Kan. 
issa-cp.org 



Configuring Windows Server 2008 
Active Directory Domain Services 

July 11-15, 6 p.m. 
Online Live 
www.nhnorthflorida.com 



AITP Research Triangle Park 

July 14 
University Club 
4200 Hillsboro St. 

Raleigh, N.C. 
www.rtp-aitp.org 



Data Connectors Hartford 
Tech-Security Conference 

July 14 
Crowne Plaza Hotel 
100 Berlin Road 
Cromwell, Conn. 
www.dataconnectors.com 
/events/201 1/07Hartford/agenda.asp 



Do you have an event you'd like to see listed? 
Send an email to feedback@processor.com. 
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GREEN TECH & TIPS 



University Researclies Storage, Data Center 

Carnegie Mellon's Parallel Data Laboratory Unites IT & Academia 

BYRODSCHER 



You don't have time to study. Sure, there are things you need to learn about how 
your data center operates, and it would be especially useful to think about how to 
improve that efficiency. But the reality is, you're too busy running the data center to 
stop, back away from your operation, and spend weeks (or months or even years) look- 
ing into how data centers should run. Luckily, you don 't have to. It turns out that there 
are people to do that for you. 



A Learning Environment 

Dr. Greg Ganger is the head of Carnegie 
Mellon University's Parallel Data Lab. 
Begun in 1992, PDL's mission is to inves- 
tigate how to optimize data storage and 
data processing systems. "PDL creates 
technologies and concepts that make 
storage and data processing faster, more 
efficient, more robust, and more manage- 
able," Ganger says. Although PDL began 
by focusing on RAID and file systems, 
its mandate now has grown to embrace a 
variety of computing systems problems, 
still including storage issues, but also cov- 
ering how data is consumed, manipulated, 
and communicated. 

PDL is itself a research organization, 
not a physical lab, but it runs an operation- 
al forward-looking data center called the 
DCO (Data Center Observatory), which 
is used to explore a broad array of tech- 
nology issues, including the study of data 
center challenges such as power, cooling, 
and job scheduling. DCO also serves as a 



utility for a variety of research organiza- 
tions across the Carnegie Mellon campus. 

As a data center test bed, DCO was 
designed from the beginning for energy 
efficiency. The designers opted not to use 
forced-air cooling, instead utilizing a hot- 
aisle containment architecture in which the 
hot air is kept in a separated area (in this 
case, via doors and ceiling over the hot 
aisle) and cooled directly. Ganger reports 
that this greatly increased both energy 
efficiency and ease of opera- 
tion. It also provided tre- 
mendous space efficiency: 
The room is designed to 
support 40 racks of com- 
puters (at about 20kW 
per rack), plus all of the 
air, PDU, UPS, and bat- 
tery units, in just 1,825 
square feet. 

Storage Efficiency Is Key 

With the help of the 
physical facilities offered 



by DCO, PDL studies storage, among 
other things, and it's no surprise that the 
efficiency of data center storage mecha- 
nisms has a direct impact on the "green- 
ing" of a data center. 

"Storage is a major component of any data 
center, so storage efficiency is important," 
Ganger says. "This is true of energy effi- 
ciency, so it's a real part of 'greening.' And, 
of course, the data processing aspects are 
important, as well, and we work on both." 

Ganger points 
out that disk 




drives, because they're mechanical devic- 
es, are natural energy hogs. "Increasing 
storage efficiency and doing things like 
spinning down idle disks can amount to 
real savings," he says. 

The effectiveness of virtualization as 
part of the green technology toolbox is 
something else that PDL has been exam- 
ining. The lab's vCloud project, notes 
Ganger, "is all about exploiting virtualiza- 
tion, automating private clouds, and more 
efficiently using resources. It's still quite 
early in that project, so we don't have 
a lot of results specifically from it. 
We have created some exciting 
new technologies for allowing 
large-scale data analytics to 
share cloud infrastructure 
with other applications, 
elastically scaling accord- 
ing to the workload and 
priorities." The group has 
already been able to move 
several academic research 
projects to shared resourc- 
es, and Ganger says he's 
looking forward to testing at a 
larger scale in the coming year. 
With Carnegie Mellon and other 
university-sponsored researchers 
investigating data center efficiency, it's 
helpful to know that those of us in the IT 
trenches have allies in academia. 



Processor Solutions Directory 

Here are brief snapshots of several companies offering products designed for the data center and IT industry. 

Listings are sorted by category, making it easy for you to find and compare companies 

offering the products and services you need. 

You can find more detailed information on these companies and the products they offer inside this issue. 



To list your company and products, 
call (800) 247-488 



Physical Infrastructure 



2&AVTECH 



AVTECH Software, founded in 1 988, is focused on nnak- 
ing the nnonitoring and nnanagennent of systenns, servers, 
networks, and data center environnnents easier. AVTECH 
provides powerful, easy-to-use software and hardware that 
saves organizations tinne and nnoney while innproving opera- 
tional efficiency and preparedness. AVTECH products use 
advanced alerting technologies to connnnunicate critical status 
infornnation and can perfornn autonnatic corrective actions. 

Products Sold: 

A full range of products that nnonitor the IT and facilities 
environnnent, including tennperature, hunnidity, power, 
flood, roonn entry, and UPS 



220-6700 I www.AVTECH.com 



Physical Infrastructure 




BayTech was founded in 1976 and, since the 1990s, has 
developed unique products for rennote power nnanagennent. 
The connpany uses printed circuit board instead of wires for 
a better, nnore resilient connection between the data center 
equipnnent and the receptacle. BayTech provides an exten- 
sive Web site with brochure downloads, warranty infornna- 
tion, and reseller support and also offers evaluation units for 
data centers. 

Products Sold: 

• Power control, distribution, nnanagennent, and nnetering 

• Power transfer switches 

• Console nnanagennent and rennote site nnanagennent 



(800)523-2702 I www.baytech.net 



Physical Infrastructure 



CYBER@SWITCHING® 

Cyber Switching is an innovator and manufacturer of power 
management solutions used to distribute power throughout 
an entire data center, from the building infrastructure to the 
rack level. Cyber Switching products provide companies 
with quality power data throughout the data center, enabling 
them to make sound, informed decisions regarding their 
power grid. Located in San Jose, Calif., Cyber Switching 
began pioneering power distribution technologies in 1994 
and continues to design and develop innovative and techni- 
cally advanced power solutions such as the ePower, PM8, 
Dualcom S, EMC, Galaxy Series, E Series, and PS Series. 



Products Sold: 

• intelligent power management 

• Value-added power management 

• Metered power distribution 

• Three-phase power distribution 



Energy management 
and control 
Switches 



311-6277 I www.cyberswitching.com 
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Physical Infrastructure 



DAZA CERlE^ DEPOl 

A Gaw Associates, Inc. Company 

Data Center Depot prides itself on providing tine best 
selection, pricing, and support for data center products. 
Our diversified product line can meet the specific needs of 
data center managers responsible for virtually any type of 
corporate setup. We are a major manufacturer and also 
distribute the product lines for top companies in the indus- 
try. Most of our products are available via our online store, 
but we encourage you to contact us so we can help you 
find the right products for your requirements and budget. 

Products Sold: 

• Data cabinets, racks, and accessories 

• LAN and NOC furniture • Cable ladders 

• Consoles and monitor walls • Patch panels 

• Power supplies • Storage furniture 



(877)429-7225 I www.DataCenterDepot.com 



Physical Infrastructure 



MOVINCOOL 

THE #1 SPOT COOLING SOLUTION 



The MovinCool division of DENSO Sales California has 
pioneered the use of portable air conditioning solutions for 
a variety of North and South American markets since 1982. 
MovinCool works with a national network of distributors and 
suppliers to provide product sales, installation, and rental. 

Products Sold: 

• Office Pro Portable Air Conditioner Series for indoor 
environments such as server and telecom rooms 

• Classic & Classic Plus Portable Air Conditioner Series for 
moisture removal, outdoor and industrial spot-cooling 

• CM Series ceiling-mounted A/C for cooling server 
rooms, telecom closets, or anywhere space is limited 



(800)264-9573 I www.movincooLcom 



Physical Infrastructure 



IT 



RACKMOUNT 

SOLUTIONS, Ltd 

' where customer service matters^ 



Rackmount Solutions' mission is to listen to the IT engi- 
neer's specific needs and deliver superb-quality, high- 
performance products through continuous product innova- 
tion and operational excellence. We pride ourselves in 
providing quality customer service, products that fit your IT 
requirements, and solid value for your money. 

Products Sold: 

• Wallmount and server racks and cabinets, including 
sound proof, air conditioned, and large cable bundle 

• Desktop/tabletop portable racks 

• Shockmount shipping cases 

• Bulk cable 



(866)207-6631 I www.rackniountsolutions.net 



Physical Infrastructure 



SEALEZE 

A Unit of lama tncorporottd 



Brush sealing sol utions for over 30 years. 

Sealeze has been providing high quality brush products 
and services for more than 25 years. Our goal is to exceed 
your expectations for service and quality. To make that 
possible, we manufacture all of our products in our factory 
in Richmond, Va., and operate under the ISO 9001-2000 
Quality Management System to ensure we're manufactur- 
ing the highest quality product every time. 

Products Sold: 

• A complete line of brush seal products, including 
in-floor, surface mount, through-wall, and circular 
cable seals. 



Physical Infrastructure 




Based in New York City, Hergo Ergonomic Support 
Systems is an independent designer and manufacturer of 
enclosure cabinet solutions, technical computer furniture, 
and modular racking systems. The company's products are 
designed to promote organization in the workspace and 
to increase the productivity of computers, peripherals, and 
communications equipment. Hergo is known for its high- 
quality products and superior customer service. 



Products Sold: 

• Racks 

• Enclosures/cabinets 

• Motorized workstations 

• Flat-panel arms 



Computer desks 
Cable management 
Power management 



222-7270 I www.hergo.com 



Physical Infrastructure 




oncore 



California-based Oncore Cables is a supplier of high- 
quality, custom copper and fiber assemblies that are 
made in the U.S.A. The company is backed by more 
than 20 years of industry experience and specializes in 
quick turnaround cable production simply because its 
customers shouldn't need to wait to get their networks 
up and running. 



Products Sold: 

• Fiber optic cables 

• CAT 5e/CAT 6 cables 

• Power cords 



• ClearFit patch cables 

• Custom coax cables 

• Audio/video cables 



(949)777-2255 I www.oncorecables.com 



Physical Infrastructure 




RackSolutions has been serving the data center market for 
more than 10 years. All of our products are designed, 
engineered, built, and shipped under our own roof. We 
have product solutions available for every major OEM, but 
if one of our existing products doesn't fit your needs, our 
top-notch mechanical and electrical engineers can create 
the item you need from scratch, solving even the tough- 
est installation design challenges. Best of all, we typically 
don't charge up-front fees for design services. 

Products Sold: 

Computer server racks, cabinets, shelves, and 
mounting products. 



(888) 903-7225 I www.racksolutions.com 



Physical Infrastructure 



SENSAPHONE* 

REMOTE MONITORING SOLUTIONS 



Sensaphone has been designing and manufacturing remote 
monitoring systems for more than 25 years and has more 
than 300,000 of its products in use. Sensaphone's product 
lineup offers a full range of devices with a broad number of 
features and applications designed to monitor your entire 
infrastructure and alert you to changes. All product engineer- 
ing functions, including hardware and software design and 
circuit board layout and assembly, are performed at the 
Sensaphone facility in Aston, Penn. 

Products Sold: 

Remote monitoring solutions that provide email and voice 
alarm notification for problems related to temperature, 
humidity, water detection, power failure, and more. 



Physical Infrastructure 



c 



CLAYTEK 

by iS tar US A Group 



Claytek, part of iStarUSA Group, is a leading provider of 
server cabinets, racks, and related accessories. Since 
its founding in 2005, Claytek has grown tremendously 
because of reliable and innovative design and product 
quality. In addition, customers find that Claytek offers some 
of the most affordable solutions the market has to offer. 

Products Sold: 

• Cabinet enclosures 

• Wallmount solutions 

• Open-frame racks 

• Special applications 

• Rack- and cabinet-related accessories 



(626)303-8885 I www.istarusa.com 



Physical Infrastructure 



PDUs 



direct 



Established in 2008, PDUsDirect.com is an online whole- 
saler providing a select line of PDUs for server and net- 
worked environments. PDUs Direct's basic, metered, and 
switched Rack PDUs provide local and remote power 
management, power monitoring, and environmental 
monitoring. We pride ourselves in offering industrial-grade 
quality products at the lowest prices, with the fastest ship- 
ping (most orders shipped within 24 hours) and simplest 
purchase process. 

Products Sold: 

A complete line of 20A PDUs, including metered, basic, 
and switched. 



751-7387 I pdusdirect.com 



Physical Infrastructure 



Racktivity 



Redwood City, Calif., -based Racktivity has been helping 
to make data centers more energy-efficient since 2008. 
The firm offers products and technologies that optimize 
customers' physical infrastructure layers to help them bet- 
ter manage energy consumption and recover quickly in the 
event of a failure. Its patent-pending EnergyDNA technol- 
ogy gives admins access to the Power Quality analytics 
they need to maintain the health of their data center racks. 
Proactive and predictive features also enable customers to 
maintain uptime on critical systems. 

Products Sold: 

• Power distribution units 

• Energy and uptime management software 



(650)361-9700 | www.racktivity.com 



Physical Infrastructure 




Server Technology 

Solutions for the Data Center Equipment Cabinet 



Server Technology is committed to the PDU market with the 
largest group of engineers dedicated to power distribution 
and other solutions within the equipment cabinet. Advance- 
ments in device power monitoring help data centers monitor 
and improve their efficiency, and continuous research and 
development is fueled by companies that look to Server 
Technology for their custom cabinet power solutions. 

Products Sold: 

A complete line of cabinet PDUs, including Per Outlet 
Power Sensing (POPS), Rack Mount Fail-Safe Transfer 
Switch, Console Port access with remote power manage- 
ment. Switched, Smart, Metered, Basic, and -48 VDC 



(800) 787-7325 I www.sealeze.com 



(877)373-2700 I www.sensaphone.com 



(800) 835-1515 I www.servertech.com 
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Physical Infrastructure 



upsite 

technologies® 



Upsite Technologies was founded in 2001 to address 
data center needs for products and solutions reaching far 
beyond standard engineering and consulting offerings. The 
company innovates elegantly engineered products specifi- 
cally designed to maximize data center airflow efficiency, 
improve PUE, and increase heat density. Upsite designs 
and manufactures the LOK family of products, which pro- 
vides superior sealing, maximum energy savings, and the 
best protection available for your IT equipment. 



Products Sold: 

• KoldLok Grommets 

• HotLok Blanking Panels 



HotLok Temperature Strips 



(505)982-7800 I www.upsite.com 



Storage 



ESS Data Recovery 

www.d a to recove ry . c o m 



real labs, real people, 

REAL RECOVERY 




DataRecovery.com (formerly ESS Data Recovery) was 
formed in 1 996 as one of the first data recovery com- 
panies in the world. We have labs in Minnesota, Illinois, 
California, and Ontario, Canada, that service thousands 
of customers worldwide. We can work with almost any 
storage device, including large RAID arrays, data tapes, 
and any brand of hard drive. 



Services Offered: 

A complete line of data recovery services, including online 
backup, tape duplication, and secure data erasure. 



(800)237-4200 I www.datarecovery.com 



Clients 



^dtSeaixh' 

www.dtsearch.com 



Maryland-based dtSearch started research and develop- 
ment in text retrieval in 1988. The company is known for 
speedy adoption of new programming standards, OSes, 
and file types. Plus, it has a flexible licensing model. 
Typical corporate use of dtSearch includes general infor- 
mation retrieval, Internet and intranet site searching, and 
email archiving and email filtering. 

Products Sold: 

Text retrieval products, including: 

• Desktop With Spider • Web With Spider 

• Network With Spider • Engine For Win & .NET 

• Publish For CD/DVDs • Engine For Linux 



(800)483-4637 I www.dtsearch.com 



Networking & VPN 



pl 



ixer 

International 



Plixer International develops NetFlow Analysis solutions that 
monitor and report on the utilization of network resources. 
Plixer was founded in 1 999 and merged with Somix Tech- 
nologies in 2006. The company's solutions provide a holistic 
view regardless of equipment vendor. Plixer works with cus- 
tomers to ensure the tools quickly help pinpoint slowdowns in 
the network and the applications that depend on it. 

Products Sold: 

• Tools for analysis and reporting of resource utilization 

• Software for monitoring and trending bandwidth usage 

• Software for alarming based on unusual or potentially 
hazardous network traffic patterns 



(207)324-8805 I www.plixer.com 



Servers 



CHC^BRO 



Chenbro is a leader in enclosure solutions, selling its prod- 
ucts primarily to system integrators and OEM and channel 
partners. The company's extensive research and develop- 
ment efforts help it to keep its competitive edge and main- 
tain market leadership, with special focus on thermal, EMI, 
and acoustic solutions. Taiwan-based Chenbro has offices 
in the United States, UK, The Netherlands, and China. 

Products Sold: 

• A comprehensive line of PC chassis, server/workstation 
chassis, rackmount chassis, and HDD enclosures. 



(909)947-3200 I www.chenbro.com 



it 



• PaceButler buys used cell phones. 

• In business since 1987 

• Redeploy your used phones after upgrade 

• Donation option - directly to the non-profit of your choice 

• Dedicated to customer satisfaction 

- A+ Rating with the Better Business Bureau 

- Payment issued in four days 

• Dedicated to employee development 

- Book reading program 

- Health and fitness programs 

Products Sold: 

We buy used cell phones & PDAs, including Apple, LG, 
Blackberry, HTC, Motorola, Nextel, Nokia, PalmOne & 
Samsung. 



(800)248-5360 I www.pacebutler.com 



Storage 



WeBuyUsedTape.net 



WeBuyUsedTape has been in the business of purchasing 
new, used, excess, and surplus magnetic media for more 
than 35 years. Our regulation-approved, secure data 
eradication processes and environmentally friendly 
disposal programs give organizations a safe and economic 
incentive for recycling used media. Customer service is 
one of our top priorities, backed by helpful, knowledge- 
able, and efficient team members. Obtain a no-obligation, 
confidential quote on your tape media today. 

Services Offered: 

Tape media buyback, secure data eradication, media 
disposal, and recycling 



(800)821-1782 I www.WeBuyUsedTape.net 



Servers 



SUPERMICR^ 



When buying a server, you don't want a one-size-fits-all 
solution. Supermicro uses modular and interoperable 
Server Building Blocks to offer the highest levels of flexibility 
and customization possible to design servers tailored and 
optimized for your specific needs. Supermicro's focus on 
green computing leadership, system design expertise, and 
power-saving technologies ensures the products you 
purchase are energy-efficient and application-optimized. 



Products Sold: 

• Servers 

• Motherboards 

• Chassis 



Networking 
Storage 



(408)503-8000 I www.supermicro.com 




In 1987, Pegasus Computer Marketing started providing 
mainframe products to the end-user market. What began 
as a sales-only organization soon adapted to offer in-house 
repair and refurbishment. During the past 10 years, Pegasus 
has focused primarily on the point-of-sale and barcode 
industries, buying, selling, and providing service contracts for 
anywhere from a few scanners to hundreds. 

Products Sold: 

We buy, sell, and service: 

• Point-Of-Sale Equipment and POS/PC Flat Panels 

• Wired and Wireless Barcode Hardware 

• Kronos Time Clocks and Accessories 



(800)856-2111 I www.pegasuscomputer.net 
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SUPERMICR 



I 



The Evolution of IT 



Supports Intel® Xeon® processor 7500 
and E7-8800/4800 product families 
(Up to 80 cores per system) 

Intel® 7500 Chipsets and 751 Scalable 
Memory Buffers 

Supports up to 2TB* ECC Reg. DDR3 
in 64 DIMMs 

Onboard 6Gb/s SAS (SAS 2.0) with 
hardware RAID (X8QB6-F) 




Up to 2800W/3200W Redundant 
Gold/Platinum Level High-Efficiency 
Power Supplies with I^C & PMBus 

Integrated IPMI 2.0 Management + KVM with 
Dedicated LAN 

UP to 1 0x PCI-E 2.0 Slots for GPU Application 

Dual LAN with Intel® 82576 Gigabit 
Ethernet Controller 

Up to 24x 2.5" hot-swap SAS/SATA 
HDD/SSD devices 

Enterprise mission-critical applications, 
e-Commerce, virtualization, graphics, 
super-high computing performance 



* Please check'Tested Memory List" on Supermicro website for compatibility 

* * Features may vary by model. 



AMAX 

1-800-800-6326 
www.amax.com 



Arrow Electronics 

1-888-427-2250 
www.arrownacp.com 



ASI 

1-800-2000-ASI 
www.asiparlner.com 



Bell Micro Ingram Micro MA LABS 

1-800-232-9920 1-800-456-8000 1-408-941-0808 

www.belImicro.com www.ingrammicro.com www.maiabs.com 



Synnex Tech Data 

1-800-756-5974 1-800-237-8931 
www.synnex.com www.techdala.com 



www.supermicro.com 



coSuper Micro Computer, Inc. Specifications subject to change without notice, Intel, the fntei logo, Xeon, and Xeon inside, are trademarks or registered trademarks of Intel Corporation in the US 
and other countries. All other brands and names are the property of their respective owners. 



